CVE-2022-31651

In SoX 14.4.2, there is an assertion failure in rateinit in rate.c in libsox.a...

Use-after-free

sox is vulnerable to use-after-free. The vulnerability exists in lsxaiffstartread in aiff.c, allowing a malicious user to exploit this flaw by supplying a malformed AIFF file which may lead to denial of service DoS during the conversion of an audio file...

CVE-2019-8356

An issue was discovered in SoX 14.4.2. One of the arguments to bitrv2 in fft4g.c is not guarded, such that it can lead to write access outside of the statically declared array, aka a stack-based buffer overflow...