Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 27

Export CSV
CVE-2021-33844

SoX: divide by zero crash in wav.c

A floating point exception (divide-by-zero) issue was discovered in SoX in functon startread() of wav.c file. An attacker with a crafted wav file, could cause an application to crash.

CVSS 3.1 · 5.5 Medium EPSS < 1% KEV · Not listed
Vendors
Sound Exchange Project
Products
Sound Exchange
CVE-2022-31650

sox: a floating-point exception in lsx_aiffstartwrite in aiff.c in libsox.a

In SoX 14.4.2, there is a floating-point exception in lsx_aiffstartwrite in aiff.c in libsox.a.

CVSS 3.1 · 5.5 Medium EPSS 1.1% KEV · Not listed
Vendors
Sound Exchange Project
Products
Sound Exchange
CVE-2021-23159

sox: heap based overflow in formats_i.c

A vulnerability was found in SoX, where a heap-buffer-overflow occurs in function lsx_read_w_buf() in formats_i.c file. The vulnerability is exploitable with a crafted file, that could cause an application to crash.

CVSS 3.1 · 5.5 Medium EPSS < 1% KEV · Not listed
Vendors
Sound Exchange Project
Products
Sound Exchange
CVE-2021-23172

sox: heap overflow in hcom.c

A vulnerability was found in SoX, where a heap-buffer-overflow occurs in function startread() in hcom.c file. The vulnerability is exploitable with a crafted hcomn file, that could cause an application to crash.

CVSS 3.1 · 5.5 Medium EPSS < 1% KEV · Not listed
Vendors
Sound Exchange Project
Products
Sound Exchange
CVE-2021-23210

sox: divide by zero in voc.c

A floating point exception (divide-by-zero) issue was discovered in SoX in functon read_samples() of voc.c file. An attacker with a crafted file, could cause an application to crash.

CVSS 3.1 · 5.5 Medium EPSS < 1% KEV · Not listed
Vendors
Sound Exchange Project
Products
Sound Exchange
CVE-2021-3643

sox: buffer overflow read vulnerability

A flaw was found in sox 14.4.1. The lsx_adpcm_init function within libsox leads to a global-buffer-overflow. This flaw allows an attacker to input a malicious file, leading to the disclosure of sensitive information.

CVSS 3.1 · 9.1 Critical EPSS 1.5% KEV · Not listed
Vendors
Sound Exchange Project
Products
Sound Exchange
CVE-2021-40426

sox: heap-based buffer overflow vulnerability exists in the sphere.c start_read() function

A heap-based buffer overflow vulnerability exists in the sphere.c start_read() functionality of Sound Exchange libsox 14.4.2 and master commit 42b3557e. A specially-crafted file can lead to a heap buffer overflow. An attacker can provide a malicious file to trigger this vulnerability.

CVSS 3.1 · 8.8 High EPSS 2.1% KEV · Not listed
Vendors
Sound Exchange Project
Products
Sound Exchange
CVE-2017-11358

sox: Invalid memory read in read_samples function in hcom.c

The read_samples function in hcom.c in Sound eXchange (SoX) 14.4.2 allows remote attackers to cause a denial of service (invalid memory read and application crash) via a crafted hcom file.

CVSS 3.0 · 5.5 Medium EPSS 7.4% KEV · Not listed
Vendors
Debian Sound Exchange Project
Products
Debian Linux Sound Exchange
CVE-2017-11359

sox: Devide by zero in wavwritehdr function in wav.c

The wavwritehdr function in wav.c in Sound eXchange (SoX) 14.4.2 allows remote attackers to cause a denial of service (divide-by-zero error and application crash) via a crafted snd file, during conversion to a wav file.

CVSS 3.0 · 5.5 Medium EPSS 6.6% KEV · Not listed
Vendors
Debian Sound Exchange Project
Products
Debian Linux Sound Exchange
CVE-2017-15370

sox: Heap-based buffer overflow in the ImaExpandS function

There is a heap-based buffer overflow in the ImaExpandS function of ima_rw.c in Sound eXchange (SoX) 14.4.2. A Crafted input will lead to a denial of service attack during conversion of an audio file.

CVSS 3.0 · 5.5 Medium EPSS 1.7% KEV · Not listed
Vendors
Debian Sound Exchange Project
Products
Debian Linux Sound Exchange
CVE-2017-11332

sox: Divide by zero in startread function in wav.c

The startread function in wav.c in Sound eXchange (SoX) 14.4.2 allows remote attackers to cause a denial of service (divide-by-zero error and application crash) via a crafted wav file.

CVSS 3.0 · 5.5 Medium EPSS 6.6% KEV · Not listed
Vendors
Debian Sound Exchange Project
Products
Debian Linux Sound Exchange
CVE-2017-15372

sox: Stack-based buffer overflow in the lsx_ms_adpcm_block_expand_i function

There is a stack-based buffer overflow in the lsx_ms_adpcm_block_expand_i function of adpcm.c in Sound eXchange (SoX) 14.4.2. A Crafted input will lead to a denial of service attack during conversion of an audio file.

CVSS 3.0 · 5.5 Medium EPSS 1.6% KEV · Not listed
Vendors
Debian Sound Exchange Project
Products
Debian Linux Sound Exchange
CVE-2017-15371

sox: Reachable assertion abort in the function sox_append_comment()

There is a reachable assertion abort in the function sox_append_comment() in formats.c in Sound eXchange (SoX) 14.4.2. A Crafted input will lead to a denial of service attack during conversion of an audio file.

CVSS 3.0 · 5.5 Medium EPSS 1.6% KEV · Not listed
Vendors
Debian Sound Exchange Project
Products
Debian Linux Sound Exchange
CVE-2014-8145

sox: two heap out-of-bounds access issues (oCERT-2014-010)

Multiple heap-based buffer overflows in Sound eXchange (SoX) 14.4.1 and earlier allow remote attackers to have unspecified impact via a crafted WAV file to the (1) start_read or (2) AdpcmReadBlock function.

CVSS 2.0 · 7.5 High EPSS 7.7% KEV · Not listed
Vendors
Debian Oracle Sound Exchange Project
Products
Debian Linux Solaris Sound Exchange