CVE-2021-40426

A heap-based buffer overflow vulnerability exists in the sphere.c startread functionality of Sound Exchange libsox 14.4.2 and master commit 42b3557e. A specially-crafted file can lead to a heap buffer overflow. An attacker can provide a malicious file to trigger this vulnerability...

CVE-2021-40426

CVE-2021-40426 is a heap-buffer-overflow in the sphere.c start_read() path of Sound Exchange SoX (libsox) 14.4.2 and the master commit 42b3557e. A specially crafted input file can trigger the overflow, with potential outcomes including crash or more severe impact as described in related advisorie...

CVE-2021-40426

A heap-based buffer overflow vulnerability exists in the sphere.c startread functionality of Sound Exchange libsox 14.4.2 and master commit 42b3557e. A specially-crafted file can lead to a heap buffer overflow. An attacker can provide a malicious file to trigger this vulnerability...

CVE-2021-40426

A heap-based buffer overflow vulnerability exists in the sphere.c startread functionality of Sound Exchange libsox 14.4.2 and master commit 42b3557e. A specially-crafted file can lead to a heap buffer overflow. An attacker can provide a malicious file to trigger this vulnerability...

Vulnerability Spotlight: Heap overflow in Sound Exchange libsox library

Lilith of Cisco Talos discovered these vulnerabilities. Blog by Jon Munshaw. Cisco Talos recently discovered an exploitable heap-based buffer overflow vulnerability in the sphere.c startread functionality of Sound Exchange libsox. The libsox library is a library of... This is only the beginning!...

Sound Exchange libsox 缓冲区错误漏洞

Sound Exchange libsox is a library of sound sample file format readers/writers and sound processors organized by Sound Exchange. It was developed primarily for SoX use, but is useful for any sound application. A security vulnerability exists in Sound Exchange libsox version 14.4.2, which stems fr...

Sound Exchange libsox sphere.c start_read() heap-based buffer overflow vulnerability

Talos Vulnerability Report TALOS-2021-1434 Sound Exchange libsox sphere.c startread heap-based buffer overflow vulnerability March 23, 2022 CVE Number CVE-2021-40426 SUMMARY A heap-based buffer overflow vulnerability exists in the sphere.c startread functionality of Sound Exchange libsox 14.4.2 a...

SoX 缓冲区错误漏洞

SoX is a set of open source audio processing tools. The product supports playing, converting and recording audio in multiple formats. A security vulnerability exists in SoX version 14.4.1, which stems from the lsxadpcminit function in libsox that causes a global buffer overflow...

EulerOS 2.0 SP5 : sox (EulerOS-SA-2021-1231)

According to the versions of the sox package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - SoX Sound eXchange is a sound file format converter SoX can convert between many different digitized sound formats and perform simple sound...

Buffer Overflows

Sound eXchange is vulnerable to buffer overflows. Remote attackers could cause overflows using a crafted WAV file via AdpcmReadBlock function...

Denial Of Service (DoS)

Sound eXchange is vulnerable to denial of service attacks. A heap-based buffer overflow in the ImaExpandS function of imarw.c could lead to a denial of service attack during conversion of an audio file...

CentOS 7 : sox (CESA-2019:2283)

An update for sox is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Low. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE lin...

The vulnerability of the lsx_make_lpf function (effect_i_dsp.c) in the audio editor Sound eXchange allows a hacker to trigger a service failure.

The vulnerability of the lsxmakelpf function effectidsp.c in the Sound eXchange audio editor is related to a speculative overflow condition. Exploiting this vulnerability could allow an attacker to execute arbitrary code or cause service interruptions...

The vulnerability of the bitrv2 function (fft4g.c) in the Sound eXchange audio editor allows a hacker to cause a service failure.

The vulnerability of the bitrv2 function fft4g.c in the Sound eXchange audio editor is related to the output of operations that go beyond the buffer boundaries in memory. Exploiting this vulnerability could allow a remote attacker to cause a service failure...

The vulnerability of the channel_start function in the remix.c script of the Sound eXchange audio editor allows a hacker to trigger a service failure.

The vulnerability of the channelstart function in the remix.c script of the Sound eXchange audio editor is related to a serious overflow condition. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the lsx_make_lpf function (effect_i_dsp.c) in the audio editor Sound eXchange allows a hacker to trigger a service failure.

The vulnerability of the lsxmakelpf function effectidsp.c in the Sound eXchange audio editor is related to the assignment of a null pointer. Exploiting this vulnerability could allow an attacker to cause a service failure...

Low: Red Hat Security Advisory: sox security update

An update for sox is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Low. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE lin...

USN-4079-1 sox vulnerabilities

It was discovered that SoX incorrectly handled certain MP3 files. An attacker could possibly use this issue to cause a denial of service. CVE-2019-8354, CVE-2019-8355, CVE-2019-8356, CVE-2019-8357...

CVE-2019-1010004

SoX - Sound eXchange 14.4.2 and earlier is affected by: Out-of-bounds Read. The impact is: Denial of Service. The component is: readsamples function at xa.c:219. The attack vector is: Victim must open specially crafted .xa file. NOTE: this may overlap CVE-2017-18189...

AZL-43855 CVE-2019-1010004 affecting package sox 14.4.2.0-34

SoX - Sound eXchange 14.4.2 and earlier is affected by: Out-of-bounds Read. The impact is: Denial of Service. The component is: readsamples function at xa.c:219. The attack vector is: Victim must open specially crafted .xa file. NOTE: this may overlap CVE-2017-18189...