CVE-2018-1000223

SoundStretch command-line utility packaged with SoundTouch library is vulnerable to heap-based buffer overflow in WavFile.cpp:WavInFile::readHeaderBlock function that can lead to arbitrary code execution when processing untrusted file input...

CVE-2018-14044

SoundTouch library is vulnerable to reachable assertion in RateTransposer::setChannels function that can cause denial of service to applications using this library for processing the untrusted file input...