CyberRota Analysis
AI-GeneratedPocketSphinx versions prior to 5.1.1 are vulnerable to stack or heap buffer overflows and memory corruption due to inadequate validation of language and acoustic model headers, as well as unbounded string handling in certain loaders. An attacker with write access to a directory specified by POCKETSPHINX_PATH can exploit this vulnerability by replacing or adding malicious model files. Organizations using PocketSphinx, particularly those on version 5prealpha, should prioritize upgrading to version 5.1.1 to mitigate potential exploitation.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
PocketSphinx is a small speech recognizer. Prior to 5.1.1, the trie language-model loaders in src/lm/ngram_model_trie.c do not adequately validate boundary conditions in ARPA, DMP, and binary format headers, and the acoustic-model loaders in src/mdef.c and src/util/bio.c use sscanf with unbounded string fields. Loading an invalid, corrupted, or malicious language or acoustic model can therefore cause stack or heap buffer overflows and memory corruption. An attacker who can write to a directory selected by POCKETSPHINX_PATH can replace or add a model file that PocketSphinx later loads; users of PocketSphinx 5prealpha have no backported patch and must migrate to the fixed release. This issue is fixed in version 5.1.1.