SE
Product
Sound Exchange
27
CVEs
0
On KEV
9.1
Max CVSS
0
New 30D
Severity mix
Critical 1High 4Medium 21Low 0
Watch
Add Sound Exchange to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2021-3643 | 9.1 | May 2 | A flaw was found in sox 14.4.1 Affected: 14.4.1 |
| CVE-2021-40426 | 8.8 | Apr 14 | A heap-based buffer overflow vulnerability exists in the sphere.c start_read() functionality of Sound Exchange libsox 14.4.2 and master commit 42b3557e Affected: 14.4.2 |
| CVE-2023-34432 | 7.8 | Jul 10 | A heap buffer overflow vulnerability was found in sox, in the lsx_readbuf function at sox/src/formats_i.c:98:16 Affected: through 14.4.3 |
| CVE-2023-34318 | 7.8 | Jul 10 | A heap buffer overflow vulnerability was found in sox, in the startread function at sox/src/hcom.c:160:41 Affected: 14.4.3 |
| CVE-2017-18189 | 7.5 | Feb 15 | In the startread function in xa.c in Sound eXchange (SoX) through 14.4.2, a corrupt header specifying zero channels triggers an infinite loop with a resultant NULL pointer… Affected: through 14.4.2 |
| CVE-2023-32627 | 5.5 | Jul 10 | A floating point exception vulnerability was found in sox, in the read_samples function at sox/src/voc.c:334:18 Affected: 14.4.3 |
| CVE-2023-26590 | 5.5 | Jul 10 | A floating point exception vulnerability was found in sox, in the lsx_aiffstartwrite function at sox/src/aiff.c:622:58 Affected: 14.4.3 |
| CVE-2021-33844 | 5.5 | Aug 25 | A floating point exception (divide-by-zero) issue was discovered in SoX in functon startread() of wav.c file Affected: 14.4.2-7 |
| CVE-2021-23210 | 5.5 | Aug 25 | A floating point exception (divide-by-zero) issue was discovered in SoX in functon read_samples() of voc.c file Affected: 14.4.2-7 |
| CVE-2021-23172 | 5.5 | Aug 25 | A vulnerability was found in SoX, where a heap-buffer-overflow occurs in function startread() in hcom.c file Affected: 14.4.2-7 |
| CVE-2021-23159 | 5.5 | Aug 25 | A vulnerability was found in SoX, where a heap-buffer-overflow occurs in function lsx_read_w_buf() in formats_i.c file Affected: 14.4.2-7 |
| CVE-2022-31651 | 5.5 | May 25 | In SoX 14.4.2, there is an assertion failure in rate_init in rate.c in libsox.a Affected: 14.4.2 |
| CVE-2022-31650 | 5.5 | May 25 | In SoX 14.4.2, there is a floating-point exception in lsx_aiffstartwrite in aiff.c in libsox.a Affected: 14.4.2 |
| CVE-2019-1010004 | 5.5 | Jul 15 | SoX - Sound eXchange 14.4.2 and earlier is affected by: Out-of-bounds Read Affected: through 14.4.2 |
| CVE-2019-13590 | 5.5 | Jul 14 | An issue was discovered in libsox.a in SoX 14.4.2 Affected: 14.4.2 |
| CVE-2019-8355 | 5.5 | Feb 15 | An issue was discovered in SoX 14.4.2 Affected: 14.4.2 |
| CVE-2019-8357 | 5.5 | Feb 15 | An issue was discovered in SoX 14.4.2 Affected: 14.4.2 |
| CVE-2019-8356 | 5.5 | Feb 15 | An issue was discovered in SoX 14.4.2 Affected: 14.4.2 |
| CVE-2017-15642 | 5.5 | Oct 19 | In lsx_aiffstartread in aiff.c in Sound eXchange (SoX) 14.4.2, there is a Use-After-Free vulnerability triggered by supplying a malformed AIFF file Affected: 14.4.2 |
| CVE-2017-15372 | 5.5 | Oct 16 | There is a stack-based buffer overflow in the lsx_ms_adpcm_block_expand_i function of adpcm.c in Sound eXchange (SoX) 14.4.2 Affected: 14.4.2 |
| CVE-2017-15371 | 5.5 | Oct 16 | There is a reachable assertion abort in the function sox_append_comment() in formats.c in Sound eXchange (SoX) 14.4.2 Affected: 14.4.2 |
| CVE-2017-15370 | 5.5 | Oct 16 | There is a heap-based buffer overflow in the ImaExpandS function of ima_rw.c in Sound eXchange (SoX) 14.4.2 Affected: 14.4.2 |
| CVE-2017-11359 | 5.5 | Jul 31 | The wavwritehdr function in wav.c in Sound eXchange (SoX) 14.4.2 allows remote attackers to cause a denial of service (divide-by-zero error and application crash) via a crafted… Affected: 14.4.2 |
| CVE-2017-11358 | 5.5 | Jul 31 | The read_samples function in hcom.c in Sound eXchange (SoX) 14.4.2 allows remote attackers to cause a denial of service (invalid memory read and application crash) via a crafted… Affected: 14.4.2 |
| CVE-2017-11332 | 5.5 | Jul 31 | The startread function in wav.c in Sound eXchange (SoX) 14.4.2 allows remote attackers to cause a denial of service (divide-by-zero error and application crash) via a crafted wav… Affected: 14.4.2 |
| CVE-2019-8354 | 5.0 | Feb 15 | An issue was discovered in SoX 14.4.2 Affected: 14.4.2 |
| CVE-2014-8145 | – | Dec 31 | Multiple heap-based buffer overflows in Sound eXchange (SoX) 14.4.1 and earlier allow remote attackers to have unspecified impact via a crafted WAV file to the (1) start_read or… Affected: through 14.4.1 |
Showing 27