CVE-2020-23903: Fedoraproject Fedora

Medium severity, CVSS 5.5. EPSS: 1% chance of exploitation in the next 30 days.

A Divide by Zero vulnerability in the function static int read_samples of Speex v1.2 allows attackers to cause a denial of service (DoS) via a crafted WAV file.

Affected products

• Fedoraproject Fedora: version 34 only; version 35 only
• Xiph Speex: version 1.2 only

Published 2021-11-10. Last modified 2026-06-17.