Use-after-free

sox is vulnerable to use-after-free. The vulnerability exists in lsxaiffstartread in aiff.c, allowing a malicious user to exploit this flaw by supplying a malformed AIFF file which may lead to denial of service DoS during the conversion of an audio file...

openSUSE Security Update : sox (openSUSE-2018-185)

This update for sox fixes the following issues : - CVE-2017-11332: Fixed the startread function in wav.c, which allowed remote attackers to cause a DoS divide-by-zero via a crafted wav file. boo1081140 - CVE-2017-11358: Fixed the readsamples function in hcom.c, which allowed remote attackers to...

CVE-2017-15642

CVE-2017-15642 : SoX 14.4.2 contains a Use-After-Free vulnerability in lsx_aiffstartread (aiff.c) triggered by a malformed AIFF file. The issue arises when processing AIFF input, potentially enabling denial of service or memory corruption as described in vulnerability records. The provided source...