Espeak Ng is a modestly represented text-to-speech synthesis engine that, despite a narrow product scope, achieves prominence through embedding in accessibility tools, screen readers, and voice-generation applications across multiple platforms. The vendor's vulnerability profile is concentrated in its single core product and reflects the parsing and audio-processing complexity inherent to speech synthesis software. Current vulnerability counts, severity distribution, and exploitation activity are shown alongside this summary.
The number and severity of CVEs published that impact products developed by Espeak Ng over time
Signals from CVEs in this vendor scope (6 CVEs).
6 CVEs · Highest risk first
| CVE | Published | CVSS | Risk | KEV | Exploit |
|---|---|---|---|---|---|
CVE-2023-4990HIGH Directory traversal vulnerability in MCL-Net versions prior to 4.6 Update Package (P01) may allow attackers to read arbitrary files. | Oct 11, 2023 | 7.5 | 21 | NO | NO |
CVE-2023-49994MEDIUM Espeak-ng 1.52-dev was discovered to contain a Floating Point Exception via the function PeaksToHarmspect at wavegen.c. | Dec 12, 2023 | 5.5 | 17 | NO | NO |
CVE-2023-49993MEDIUM Espeak-ng 1.52-dev was discovered to contain a Buffer Overflow via the function ReadClause at readclause.c. | Dec 12, 2023 | 5.3 | 16 | NO | NO |
CVE-2023-49992MEDIUM Espeak-ng 1.52-dev was discovered to contain a Stack Buffer Overflow via the function RemoveEnding at dictionary.c. | Dec 12, 2023 | 5.3 | 16 | NO | NO |
CVE-2023-49991MEDIUM Espeak-ng 1.52-dev was discovered to contain a Stack Buffer Underflow via the function CountVowelPosition at synthdata.c. | Dec 12, 2023 | 5.3 | 16 | NO | NO |
CVE-2023-49990MEDIUM Espeak-ng 1.52-dev was discovered to contain a buffer-overflow via the function SetUpPhonemeTable at synthdata.c. | Dec 12, 2023 | 5.3 | 16 | NO | NO |
Signals from CVEs in this vendor scope (6 CVEs).
An overview of all social media posts that mention a CVE ID that affects a product developed by Espeak Ng.
Media articles that mention a CVE ID that affects a product developed by Espeak Ng — matched by CVE ID, not by vendor name.