Lucene search

K
redhatcveRedhat.comRH:CVE-2019-8355
HistoryFeb 18, 2019 - 1:21 p.m.

CVE-2019-8355

2019-02-1813:21:27
redhat.com
access.redhat.com
8

0.001 Low

EPSS

Percentile

50.9%

An issue was discovered in SoX 14.4.2. In xmalloc.h, there is an integer overflow on the result of multiplication fed into the lsx_valloc macro that wraps malloc. When the buffer is allocated, it is smaller than expected, leading to a heap-based buffer overflow in channels_start in remix.c.