CVE-2020-23903
A Divide by Zero vulnerability in the function static int read_samples of Speex v1.2 allows...
CVE-2020-23903 is a medium vulnerability (CVSS 5.5) in Xiph Speex, published November 10, 2021. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 1.01%, the 63rd percentile. Fixed in speex 1.2.0-11.el9.
A Divide by Zero vulnerability in the function static int read_samples of Speex v1.2 allows attackers to cause a denial of service (DoS) via a crafted WAV file.
Attack profile
How easy it is to exploit
- Attack vector
- Local
- Complexity
- Low
- Privileges needed
- None
- User interaction
- Required
What an attacker can affect
- Confidentiality
- None
- Integrity
- None
- Availability
- High
Exploit likelihood
What each source reports
NVD Score used
A Divide by Zero vulnerability in the function static int read_samples of Speex v1.2 allows attackers to cause a denial of service (DoS) via a crafted WAV file.
- Record
CVE-2020-23903- CVSS 3.1
- 5.5 Medium
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H - CVSS 2.0
- 4.3 Medium
AV:N/AC:M/Au:N/C:N/I:N/A:P - Weakness
- CWE-369
- Updated
- 2026-11-02
CVE List No score
A Divide by Zero vulnerability in the function static int read_samples of Speex v1.2 allows attackers to cause a denial of service (DoS) via a crafted WAV file.
- Record
CVE-2020-23903- Updated
- 2026-11-02
EUVDEUVD-2020-16640 No score
A Divide by Zero vulnerability in the function static int read_samples of Speex v1.2 allows attackers to cause a denial of service (DoS) via a crafted WAV file.
- Record
EUVD-2020-16640- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-r85g-7qgq-6wrq
A Divide by Zero vulnerability in the function static int read_samples of Speex v1.2 allows...
A Divide by Zero vulnerability in the function static int read_samples of Speex v1.2 allows attackers to cause a denial of service (DoS) via a crafted WAV file.
- Record
GHSA-r85g-7qgq-6wrq- CVSS 3.1
- 5.5 Medium
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H - Weakness
- CWE-369
- Updated
- 2026-11-02
OSV
A Divide by Zero vulnerability in the function static int read_samples of Speex v1.2 allows attackers to cause a denial of service (DoS) via a crafted WAV file.
- Record
CVE-2020-23903- CVSS 3.1
- 5.5 Medium
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H - Updated
- 2026-11-02
OSVDEBIAN-CVE-2020-23903
A Divide by Zero vulnerability in the function static int read_samples of Speex v1.2 allows attackers to cause a denial of service (DoS) via a crafted WAV file.
- Record
DEBIAN-CVE-2020-23903- CVSS 3.1
- 5.5 Medium
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H - Updated
- 2026-11-02
Show 13 moreShow less
OSVOESA-2022-1701
speex security update
Speex is an Open Source/Free Software patent-free audio compression format designed for speech. The Speex Project aims to lower the barrier of entry for voice applications by providing a free alternative to expensive proprietary speech codecs. Moreover, Speex is well-adapted to Internet applications and provides useful features that are not present in most other codecs.
Security Fix(es):
A Divide by Zero vulnerability in the function static int read_samples of Speex v1.2 allows attackers to cause a denial of service (DoS) via a crafted WAV file.(CVE-2020-23903)
- Record
OESA-2022-1701- CVSS 3.1
- 5.5 Medium
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H - Updated
- 2026-11-02
OSVRHSA-2022:7979
Red Hat Security Advisory: speex security update
- Record
RHSA-2022:7979- CVSS 3.1
- 5.5 Medium
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H - Updated
- 2026-11-02
OSVRLSA-2022:7979
Low: speex security update
Speex is a patent-free compression format designed especially for speech. It is specialized for voice communications at low bit-rates.
Security Fix(es):
- speex: divide by zero in read_samples() via crafted WAV file (CVE-2020-23903)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Additional Changes:
For detailed information on changes in this release, see the Rocky Linux 9.1 Release Notes linked from the References section.
- Record
RLSA-2022:7979- CVSS 3.1
- 5.5 Medium
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H - Updated
- 2026-11-02
OSVUBUNTU-CVE-2020-23903
A Divide by Zero vulnerability in the function static int read_samples of Speex v1.2 allows attackers to cause a denial of service (DoS) via a crafted WAV file.
- Record
UBUNTU-CVE-2020-23903- CVSS 3.1
- 5.5 Medium
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H - Updated
- 2026-11-02
OSVALSA-2022:7979 No score
Low: speex security update
Speex is a patent-free compression format designed especially for speech. It is specialized for voice communications at low bit-rates.
Security Fix(es):
- speex: divide by zero in read_samples() via crafted WAV file (CVE-2020-23903)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Additional Changes:
For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.
- Record
ALSA-2022:7979- Updated
- 2026-11-02
OSVMGASA-2021-0550 No score
Updated speex packages fix security vulnerability
Fixed zero division error in read_samples (bsc#1192580). (CVE-2020-23903)
- Record
MGASA-2021-0550- Updated
- 2026-11-02
OSVopenSUSE-SU-2021:1538-1 No score
Security update for speex
This update for speex fixes the following issues:
- CVE-2020-23903: Fixed zero division error in read_samples (bsc#1192580).
This update was imported from the SUSE:SLE-15:Update update project.
- Record
openSUSE-SU-2021:1538-1- Updated
- 2026-11-02
OSVopenSUSE-SU-2021:3860-1 No score
Security update for speex
This update for speex fixes the following issues:
- CVE-2020-23903: Fixed zero division error in read_samples (bsc#1192580).
- Record
openSUSE-SU-2021:3860-1- Updated
- 2026-11-02
OSVopenSUSE-SU-2024:11632-1 No score
libspeex1-1.2-2.1 on GA media
These are all security issues fixed in the libspeex1-1.2-2.1 package on the GA media of openSUSE Tumbleweed.
- Record
openSUSE-SU-2024:11632-1- Updated
- 2026-11-02
OSVROOT-OS-DEBIAN-11-CVE-2020-23903 No score
CVE-2020-23903 in speex - Patched by Root
Root has patched CVE-2020-23903 in the speex package for Root:Debian:11. Multiple fixed versions available.
- Record
ROOT-OS-DEBIAN-11-CVE-2020-23903- Updated
- 2026-11-02
OSVSUSE-SU-2021:3858-1 No score
Security update for speex
This update for speex fixes the following issues:
- CVE-2020-23903: Fixed zero division error in read_samples (bsc#1192580).
- Record
SUSE-SU-2021:3858-1- Updated
- 2026-11-02
OSVSUSE-SU-2021:3860-1 No score
Security update for speex
This update for speex fixes the following issues:
- CVE-2020-23903: Fixed zero division error in read_samples (bsc#1192580).
- Record
SUSE-SU-2021:3860-1- Updated
- 2026-11-02
OSVUSN-5280-1 No score
speex vulnerability
It was discovered that Speex incorrectly handled certain WAV files. An attacker could possibly use this issue to cause a denial of service.
- Record
USN-5280-1- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
speexAlmaLinux:9 |
before 1.2.0-11.el9 | 1.2.0-11.el9 |
speex-develAlmaLinux:9 |
before 1.2.0-11.el9 | 1.2.0-11.el9 |
speexDebian:12 |
before 1.2~rc1.2-2 | 1.2~rc1.2-2 |
speexDebian:13 |
before 1.2~rc1.2-2 | 1.2~rc1.2-2 |
speexDebian:14 |
before 1.2~rc1.2-2 | 1.2~rc1.2-2 |
speexMageia:8 |
before 1.2.0-3.1.mga8 | 1.2.0-3.1.mga8 |
speexopenEuler:20.03-LTS-SP1 |
before 1.2.0-5.oe1 | 1.2.0-5.oe1 |
speexopenEuler:20.03-LTS-SP3 |
before 1.2.0-5.oe1 | 1.2.0-5.oe1 |
speexopenEuler:22.03-LTS |
before 1.2.0-6.oe2203 | 1.2.0-6.oe2203 |
speexRed Hat:enterprise_linux:9::appstream |
before 0:1.2.0-11.el9 | 0:1.2.0-11.el9 |
Show 24 moreShow less
| Package | Affected | Fixed |
|---|---|---|
speex-debuginfoRed Hat:enterprise_linux:9::appstream |
before 0:1.2.0-11.el9 | 0:1.2.0-11.el9 |
speex-debugsourceRed Hat:enterprise_linux:9::appstream |
before 0:1.2.0-11.el9 | 0:1.2.0-11.el9 |
speex-tools-debuginfoRed Hat:enterprise_linux:9::appstream |
before 0:1.2.0-11.el9 | 0:1.2.0-11.el9 |
speex-debuginfoRed Hat:enterprise_linux:9::crb |
before 0:1.2.0-11.el9 | 0:1.2.0-11.el9 |
speex-debugsourceRed Hat:enterprise_linux:9::crb |
before 0:1.2.0-11.el9 | 0:1.2.0-11.el9 |
speex-develRed Hat:enterprise_linux:9::crb |
before 0:1.2.0-11.el9 | 0:1.2.0-11.el9 |
speex-tools-debuginfoRed Hat:enterprise_linux:9::crb |
before 0:1.2.0-11.el9 | 0:1.2.0-11.el9 |
speexRocky Linux:9 |
before 0:1.2.0-11.el9 | 0:1.2.0-11.el9 |
speexRoot:Debian:11 |
before 1.2~rc1.2-1.1.root.io.3 | 1.2~rc1.2-1.1.root.io.31.2~rc1.2-1.1.root.io.51.2~rc1.2-1.1.root.io.21.2~rc1.2-1.1.root.io.41.2~rc1.2-1.1.root.io.11.2~rc1.2-1.1.aikido.6 |
rootio-speexRoot:Debian:11 |
before 1.2~rc1.2-1.1.root.io.3 | 1.2~rc1.2-1.1.root.io.31.2~rc1.2-1.1.root.io.51.2~rc1.2-1.1.root.io.21.2~rc1.2-1.1.root.io.41.2~rc1.2-1.1.root.io.11.2~rc1.2-1.1.aikido.6 |
speexSUSE:Linux Enterprise Software Development Kit 12 SP5 |
before 1.1.999_1.2rc1-24.3.1 | 1.1.999_1.2rc1-24.3.1 |
speexSUSE:Linux Enterprise Server 12 SP5 |
before 1.1.999_1.2rc1-24.3.1 | 1.1.999_1.2rc1-24.3.1 |
speexSUSE:Linux Enterprise Server for SAP Applications 12 SP5 |
before 1.1.999_1.2rc1-24.3.1 | 1.1.999_1.2rc1-24.3.1 |
speexSUSE:Linux Enterprise Module for Basesystem 15 SP2 |
before 1.2-3.3.1 | 1.2-3.3.1 |
speexSUSE:Linux Enterprise Module for Basesystem 15 SP3 |
before 1.2-3.3.1 | 1.2-3.3.1 |
speexSUSE:Linux Enterprise Module for Package Hub 15 SP2 |
before 1.2-3.3.1 | 1.2-3.3.1 |
speexSUSE:Linux Enterprise Module for Package Hub 15 SP3 |
before 1.2-3.3.1 | 1.2-3.3.1 |
speexUbuntu:Pro:16.04:LTS |
before 1.2~rc1.2-1ubuntu1+esm1, plus listed versions 1.2~rc1.2-1ubuntu1 |
1.2~rc1.2-1ubuntu1+esm1 |
speexUbuntu:18.04:LTS |
before 1.2~rc1.2-1ubuntu2.1, plus listed versions 1.2~rc1.2-1ubuntu11.2~rc1.2-1ubuntu2 |
1.2~rc1.2-1ubuntu2.1 |
speexUbuntu:20.04:LTS |
before 1.2~rc1.2-1.1ubuntu1.20.04.1, plus listed versions 1.2~rc1.2-1ubuntu21.2~rc1.2-1.1ubuntu1 |
1.2~rc1.2-1.1ubuntu1.20.04.1 |
speexUbuntu:22.04:LTS |
before 1.2~rc1.2-1.1ubuntu3, plus listed versions 1.2~rc1.2-1.1ubuntu11.2~rc1.2-1.1ubuntu2 |
1.2~rc1.2-1.1ubuntu3 |
speexopenSUSE:Leap 15.2 |
before 1.2-lp152.4.3.1 | 1.2-lp152.4.3.1 |
speexopenSUSE:Leap 15.3 |
before 1.2-3.3.1 | 1.2-3.3.1 |
speexopenSUSE:Tumbleweed |
before 1.2-2.1 | 1.2-2.1 |
History
| When | Changed | Sources |
|---|---|---|
| 2026-11-03 | aliases | EUVD |
| 2026-11-02 | created | CVE List, GitHub Advisories, NVD, OSV |
References
github.com/xiph/speex/issues/13
lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/R3SEV2ZRR47GSD3M7O5PH4XEJMKJJNG2
nvd.nist.gov/vuln/detail/CVE-2020-23903
Show 25 moreShow less
access.redhat.com/errata/RHSA-2022:7979
bugzilla.redhat.com/2024250
errata.almalinux.org/9/ALSA-2022-7979.html
security-tracker.debian.org/tracker/CVE-2020-23903
advisories.mageia.org/MGASA-2021-0550.html
bugs.mageia.org/show_bug.cgi?id=29718
lists.suse.com/pipermail/sle-security-updates/2021-December/009798.html
lists.opensuse.org/archives/list/[email protected]/thread/M3JTMWLYWFOOWVMDAUX2VBB5ZULOV3LY
openeuler.org/en/security/safety-bulletin/detail.html?id=openEuler-SA-2022-1701
security.access.redhat.com/data/csaf/v2/advisories/2022/rhsa-2022_7979.json
cve.org/CVERecord?id=CVE-2020-23903
errata.rockylinux.org/RLSA-2022:7979
suse.com/support/update/announcement/2021/suse-su-20213858-1
bugzilla.suse.com/1192580
ubuntu.com/security/CVE-2020-23903