eBook-speaker vulnerabilities

CVEs whose affected-version data names the eBook-speaker package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.

1 CVERSS

CVE-2026-123199Medium· 5.5

yesterday

eBook-speaker through 6.2.0 Stack-based Buffer Overflow via element name attribute

eBook-speaker 6.1.0 through 6.2.0 contains a stack buffer overflow vulnerability in get_attributes() in src/common.c caused by an unbounded strcpy of an element's name attribute. Attackers can craft an EPUB or DAISY book with a name attr…

▾ Sunlitbook-readers · eBook-speakervia CVEORG