Spotify vulnerabilities
We track 1 vulnerability in Spotify products. 1 is rated high or critical, and none are known to be exploited. The most recent was published on November 9, 2026.
1vulnerabilities
0critical
1high
0exploited
7.1average CVSS score
Latest Spotify vulnerabilities
- 7.1 High severity
Voyager: Out-of-bounds Write
The loadIndex function in nmslib hnswlib and Spotify Voyager does not verify that the element count in a serialized HNSW index is within the stored capacity used to allocate the heap buffer. An attacker can supply a crafted index file with an element count gre