cmusphinx pocketsphinx vulnerabilities

Latest cmusphinx pocketsphinx CVEs

Newest publication first

1. CVE-2026-54559 PocketSphinx: Buffer overflows in language and acoustic model loading code

   Published 2026-09-14

   Medium·CVSS 6.9 EPSS 0.55%

   PocketSphinx is a small speech recognizer. Prior to 5.1.1, the trie language-model loaders in src/lm/ngram_model_trie.c do not adequately validate boundary conditions in ARPA, DMP, and binary format headers, and the acoustic-model loaders in src/mdef.c and src/util/bio.c use ssca...

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.