CVE-2026-17493
HighCVSS 7.5Summary
IBM Watson Speech Services Cartridge versions 4.0.0 through 5.4.0 contain an out-of-bounds read vulnerability. A remote attacker could exploit this to cause a denial of service.
Risk Assessment
Availability of speech recognition services could be disrupted by crafted requests, potentially affecting dependent applications.
Recommendation
Update IBM Watson Speech Services Cartridge to a version later than 5.4.0 containing the fix and monitor for unusual service requests.
Other vulnerabilities in IBM Watson Speech Services Cartridge
See all- CVE-2026-19319Medium
IBM Watson Speech Services Cartridge 4.0.0 through 5.4.0 could allow a remote attacker to obtain sensitive information due to an out-of-bounds read.
- CVE-2026-16725Medium
IBM Watson Speech Services Cartridge 4.0.0 through 5.4.0 could allow a remote authenticated attacker to read arbitrary files from the local filesystem due to path traversal.
- CVE-2026-82418Critical
IBM Watson Speech Services Cartridge versions 4.0.0 through 5.4.0 contain a use-after-free vulnerability that could allow a remote attacker to execute arbitrary code.
Original NVD description (English source)
IBM Watson Speech Services Cartridge 4.0.0 through 5.4.0 could allow a remote attacker to cause a denial of service due to an out-of-bounds read.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS