IBM Watson Speech Services Cartridge is vulnerable to an Out-of-bounds Read in Onnx

Özet

Türkçe özeti yalnızca kritik ve yüksek önemdeki açıklar için hazırlıyoruz. Bu açık için kaynağın kendi açıklamasını gösteriyoruz.

IBM Watson Speech Services Cartridge 4.0.0 through 5.4.0 could allow a remote attacker to obtain sensitive information due to an out-of-bounds read.

Üreticinin çözüm notu (İngilizce)

Product(s)Version(s)Remediation/Fix/InstructionsIBM Watson Speech Services Cartridge5.4.0 Patch 8 The fix in 5.4.0 Patch 8 applies to all versions listed (4.0.0-5.4.0). The newest version of 5.4.0 with the included Patch 8 can be downloaded and installed from:
https://www.ibm.com/docs/en/cloud-paks/cp-data/5.4.x

Etkilenen sürümler1 yazılım

Kaynaklar3 kaynak

• CVE.org kaydı
• NVD kaydı
• ibm.com/support/pages/node/7293524 Yama

Kayıt geçmişi

1. 5 Kas 2026 00:03Yayımlandı

İlgili açıklar

• 6,5 CVE-2026-16725IBM Watson Speech Services Cartridge is vulnerable to a Path Traversal in LangSmith
• 9,8 CVE-2026-82418IBM Watson Speech Services Cartridge is vulnerable to a Use After Free condition in cryptography wheels OpenSSL
• 7,5 CVE-2026-17493IBM Watson Speech Services Cartridge is vulnerable to a D.O.S. in Unpacker.
• 8,8 CVE-2026-77372VeraCrypt: Heap overflow and out-of-bounds read in Serializable deserialization (elevated Core service input path)
• 6,5 CVE-2026-115473Mongoose: Heap OOB reads and null-byte bypass in mg_path_is_sane (util.c)
• 6,1 CVE-2026-121942ZBar through 0.23.95 Out-of-Bounds Read via _zbar_sq_decode() in sqcode.c