Vulnerabilities

A heap buffer overflow vulnerability was found in sox, in the lsx_readbuf function at sox/src/formats_i.c:98:16.

A heap buffer overflow vulnerability was found in sox, in the startread function at sox/src/hcom.c:160:41.

A floating point exception vulnerability was found in sox, in the read_samples function at sox/src/voc.c:334:18.

A floating point exception vulnerability was found in sox, in the lsx_aiffstartwrite function at sox/src/aiff.c:622:58.

A vulnerability was found in SoX, where a heap-buffer-overflow occurs in function startread() in hcom.c file.

A vulnerability was found in SoX, where a heap-buffer-overflow occurs in function lsx_read_w_buf() in formats_i.c file.

A floating point exception (divide-by-zero) issue was discovered in SoX in functon read_samples() of voc.c file.

A floating point exception (divide-by-zero) issue was discovered in SoX in functon startread() of wav.c file.

In SoX 14.4.2, there is an assertion failure in rate_init in rate.c in libsox.a.

In SoX 14.4.2, there is a floating-point exception in lsx_aiffstartwrite in aiff.c in libsox.a.

A flaw was found in sox 14.4.1.

A heap-based buffer overflow vulnerability exists in the sphere.c start_read() functionality of Sound Exchange libsox 14.4.2 and master commit 42b3557e.

SoX - Sound eXchange 14.4.2 and earlier is affected by: Out-of-bounds Read.

An issue was discovered in libsox.a in SoX 14.4.2.

An issue was discovered in SoX 14.4.2.

An issue was discovered in SoX 14.4.2.

An issue was discovered in SoX 14.4.2.

An issue was discovered in SoX 14.4.2.

In the startread function in xa.c in Sound eXchange (SoX) through 14.4.2, a corrupt header specifying zero channels triggers an infinite loop with a resultant NULL pointer dereference, which may allow a remote attacker t…

In lsx_aiffstartread in aiff.c in Sound eXchange (SoX) 14.4.2, there is a Use-After-Free vulnerability triggered by supplying a malformed AIFF file.

There is a stack-based buffer overflow in the lsx_ms_adpcm_block_expand_i function of adpcm.c in Sound eXchange (SoX) 14.4.2.

There is a reachable assertion abort in the function sox_append_comment() in formats.c in Sound eXchange (SoX) 14.4.2.

There is a heap-based buffer overflow in the ImaExpandS function of ima_rw.c in Sound eXchange (SoX) 14.4.2.

The wavwritehdr function in wav.c in Sound eXchange (SoX) 14.4.2 allows remote attackers to cause a denial of service (divide-by-zero error and application crash) via a crafted snd file, during conversion to a wav file.

The startread function in wav.c in Sound eXchange (SoX) 14.4.2 allows remote attackers to cause a denial of service (divide-by-zero error and application crash) via a crafted wav file.