{
 "version": "https://jsonfeed.org/version/1.1",
 "title": "xiph speex: all CVE events",
 "home_page_url": "https://patchwire.jonathanross.dev/products/xiph--speex/",
 "feed_url": "https://patchwire.jonathanross.dev/feeds/products/xiph--speex/all.json",
 "authors": [
  {
   "name": "Patchwire"
  }
 ],
 "language": "en",
 "items": [
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-116741/disclosed",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-116741/",
   "title": "CVE-2026-116741 · xiph speex · disclosed",
   "content_text": "Speex (libspeex) through 1.2.1 contains an out-of-bounds write vulnerability in speex_bits_read_whole_bytes() in libspeex/bits.c that mishandles length truncation for non-owned SpeexBits buffers. Attackers can stream crafted Speex data into buffers set up with speex_bits_init_buffer() or speex_bits_set_bit_buffer() to corrupt heap or stack memory and crash applications.",
   "date_published": "2026-10-26T23:32:01Z"
  }
 ]
}