CVE-2026-19319
MediumCVSS 5.3Summary
IBM Watson Speech Services Cartridge 4.0.0 through 5.4.0 could allow a remote attacker to obtain sensitive information due to an out-of-bounds read.
Risk Assessment
An attacker could access sensitive data processed by the service, potentially compromising information confidentiality. This could lead to disclosure of credentials or other sensitive information.
Recommendation
Update IBM Watson Speech Services Cartridge to the latest version containing the fix. Restrict network access to the service to trusted sources.
Other vulnerabilities in IBM Watson Speech Services Cartridge
See all- CVE-2026-17493High
IBM Watson Speech Services Cartridge versions 4.0.0 through 5.4.0 contain an out-of-bounds read vulnerability. A remote attacker could exploit this to cause a denial of service.
- CVE-2026-16725Medium
IBM Watson Speech Services Cartridge 4.0.0 through 5.4.0 could allow a remote authenticated attacker to read arbitrary files from the local filesystem due to path traversal.
- CVE-2026-82418Critical
IBM Watson Speech Services Cartridge versions 4.0.0 through 5.4.0 contain a use-after-free vulnerability that could allow a remote attacker to execute arbitrary code.
Original NVD description (English source)
IBM Watson Speech Services Cartridge 4.0.0 through 5.4.0 could allow a remote attacker to obtain sensitive information due to an out-of-bounds read.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS