Lucene search
K

71 matches found

AstraLinux
AstraLinux
added 2026/06/19 11:10 a.m.4 views

Astra Linux – Vulnerability in SOX

A vulnerability was discovered in SoX, where a heap buffer overflow occurs in the startread function in the hcom.c file. This vulnerability can be exploited by using a specially crafted hcomn file, which may cause the application to crash...

5.5CVSS7.4AI score0.00431EPSS
Exploits1References2
AstraLinux
AstraLinux
added 2026/06/19 11:10 a.m.6 views

Astra Linux – Vulnerability in SOX

A floating-point exception division by zero issue was discovered in SoX during the execution of the startread function in the wav.c file. An attacker who possesses a malicious wav file could cause the application to crash...

5.5CVSS7.3AI score0.00457EPSS
Exploits1References2
Tenable Nessus
Tenable Nessus
added 2026/05/22 12:0 a.m.7 views

Unity Linux 20.1050e / 20.1070e Security Update: sox (UTSA-2026-016770)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-016770 advisory. An issue was discovered in libsox.a in SoX 14.4.2. In sox-fmt.h startread function, there is an integer overflow on the result of integer addition wraparound to 0 fe...

5.5CVSS6.8AI score0.01059EPSS
Exploits1References4
AstraLinux
AstraLinux
added 2026/05/20 5:53 a.m.5 views

Astra Linux - уязвимость в sox

A issue was discovered in libsox.a within SoX 14.4.2. In sox-fmt.h, within the startread function, there is an integer overflow in the result of integer addition with a wrap around to 0 passed into the lsxcalloc macro that wraps around to malloc. When a NULL pointer is returned, it is used withou...

5.5CVSS6.8AI score0.01059EPSS
Exploits1References2
AstraLinux
AstraLinux
added 2026/05/03 11:59 p.m.6 views

Astra Linux – Vulnerability in SOX

A heap buffer overflow vulnerability was discovered in sox, specifically in the startread function at sox/src/hcom.c:160:41. This flaw can lead to denial of service, code execution, or information disclosure...

7.8CVSS8.3AI score0.00273EPSS
Exploits0References1
Tenable Nessus
Tenable Nessus
added 2026/01/16 12:0 a.m.7 views

MiracleLinux 7 : sox-14.4.1-7.el7 (AXSA:2019-4121:01)

The remote MiracleLinux 7 host has a package installed that is affected by a vulnerability as referenced in the AXSA:2019-4121:01 advisory. sox: NULL pointer dereference in startread function in xa.c CVE-2017-18189 Tenable has extracted the preceding description block directly from the MiracleLin...

7.5CVSS6.2AI score0.05151EPSS
Exploits1References2
Amazon
Amazon
added 2025/10/14 12:0 a.m.6 views

Low: sox

Issue Overview: A floating point exception divide-by-zero issue was discovered in SoX in functon startread of wav.c file. An attacker with a crafted wav file, could cause an application to crash. CVE-2021-33844 Affected Packages: sox Note: This advisory is applicable to Amazon Linux 2 AL2 Core...

5.5CVSS6.8AI score0.00457EPSS
Exploits1
EUVD
EUVD
added 2025/10/07 12:30 a.m.5 views

EUVD-2021-10282

Malware in sbrugna...

5.5CVSS7.1AI score0.00431EPSS
Exploits1References9
Tenable Nessus
Tenable Nessus
added 2025/08/27 12:0 a.m.4 views

Linux Distros Unpatched Vulnerability : CVE-2021-23172

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A vulnerability was found in SoX, where a heap-buffer-overflow occurs in function startread in hcom.c file. The vulnerability is exploitable with a crafted hcom...

5.5CVSS7.1AI score0.00431EPSS
Exploits1References2
BDU FSTEC
BDU FSTEC
added 2024/09/23 12:0 a.m.3 views

The vulnerability of the startread() function in the wav.c component of the SoX sound processing program allows a hacker to cause a service failure.

The vulnerability of the startread function in the SoX sound processing component wav.c is related to the lack of checks for division by zero. Exploiting this vulnerability allows a attacker to cause a service failure using a specially created file...

5.5CVSS6.8AI score0.00457EPSS
Exploits1References10Affected Software4
BDU FSTEC
BDU FSTEC
added 2024/09/23 12:0 a.m.4 views

The vulnerability of the startread() function in the hcom.c component of the SoX sound processing software allows a hacker to cause a service failure.

The vulnerability of the startread function in the hcom.c component of the SoX sound processing program is related to the copying of buffers without checking the input data. Exploiting this vulnerability allows a attacker to cause a service failure using a specially created file...

5.5CVSS6.8AI score0.00431EPSS
Exploits1References10Affected Software4
OSV
OSV
added 2023/12/15 11:6 a.m.3 views

OESA-2023-1931 sox security update

SoX is a cross-platform Windows, Linux, MacOS X, etc. command line utility that can convert various formats of computer audio files in to other formats. It can also apply various effects to these sound files, and, as an added bonus, SoX can play and record audio files on most platforms. Security...

7.8CVSS7.5AI score0.00457EPSS
Exploits5References9
Veracode
Veracode
added 2023/07/13 8:48 a.m.28 views

Buffer Overflow

libsox.so is vulnerable to Buffer Overflows. The vulnerability exists in the startread function at hcom.c due to not handling the buffer size which allows an attacker to cause an application crash or gain access to sensitive information...

7.8CVSS7AI score0.00273EPSS
Exploits0References4Affected Software2
ATTACKERKB
ATTACKERKB
added 2023/07/10 6:15 p.m.3 views

CVE-2023-34318

A heap buffer overflow vulnerability was found in sox, in the startread function at sox/src/hcom.c:160:41. This flaw can lead to a denial of service, code execution, or information disclosure...

7.8CVSS6AI score0.00273EPSS
Exploits0References3
OSV
OSV
added 2023/07/10 6:15 p.m.9 views

AZL-44005 CVE-2023-34318 affecting package sox 14.4.2.0-34

A heap buffer overflow vulnerability was found in sox, in the startread function at sox/src/hcom.c:160:41. This flaw can lead to a denial of service, code execution, or information disclosure...

7.8CVSS7.4AI score0.00273EPSS
Exploits0References1
OSV
OSV
added 2023/07/10 6:15 p.m.1 views

DEBIAN-CVE-2023-34318

A heap buffer overflow vulnerability was found in sox, in the startread function at sox/src/hcom.c:160:41. This flaw can lead to a denial of service, code execution, or information disclosure...

7.8CVSS8.3AI score0.00273EPSS
Exploits0References1
OSV
OSV
added 2023/07/10 6:15 p.m.3 views

AZL-44595 CVE-2023-34318 affecting package sox 14.4.2.0-34

A heap buffer overflow vulnerability was found in sox, in the startread function at sox/src/hcom.c:160:41. This flaw can lead to a denial of service, code execution, or information disclosure...

7.8CVSS7.4AI score0.00273EPSS
Exploits0References1
UbuntuCve
UbuntuCve
added 2023/07/10 6:15 p.m.26 views

CVE-2023-34318

A heap buffer overflow vulnerability was found in sox, in the startread function at sox/src/hcom.c:160:41. This flaw can lead to a denial of service, code execution, or information disclosure...

7.8CVSS7.3AI score0.00273EPSS
Exploits0References4
Prion
Prion
added 2023/07/10 6:15 p.m.26 views

Heap overflow

A heap buffer overflow vulnerability was found in sox, in the startread function at sox/src/hcom.c:160:41. This flaw can lead to a denial of service, code execution, or information disclosure...

4.3CVSS7.6AI score0.00273EPSS
Exploits0References2Affected Software4
Cvelist
Cvelist
added 2023/07/10 5:16 p.m.21 views

CVE-2023-34318 Heap-buffer-overflow in src/hcom.c

A heap buffer overflow vulnerability was found in sox, in the startread function at sox/src/hcom.c:160:41. This flaw can lead to a denial of service, code execution, or information disclosure...

7.8CVSS8.2AI score0.00273EPSS
Exploits0References2
Rows per page
Query Builder