SE
Product
Sound Exchange
by Sound Exchange Project · last CVE Jul 10, 2023
27
CVEs
0
On KEV
9.1
Max CVSS
0
New 30D
Severity mix
Critical 1High 4Medium 21Low 0
Watch

Add Sound Exchange to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2021-40426
8.8
2%
Apr 14
A heap-based buffer overflow vulnerability exists in the sphere.c start_read() functionality of Sound Exchange libsox 14.4.2 and master commit 42b3557e
Affected: 14.4.2
CVE-2023-34432
7.8
0%
Jul 10
A heap buffer overflow vulnerability was found in sox, in the lsx_readbuf function at sox/src/formats_i.c:98:16
Affected: through 14.4.3
CVE-2023-34318
7.8
0%
Jul 10
A heap buffer overflow vulnerability was found in sox, in the startread function at sox/src/hcom.c:160:41
Affected: 14.4.3
CVE-2017-18189
7.5
5%
Feb 15
In the startread function in xa.c in Sound eXchange (SoX) through 14.4.2, a corrupt header specifying zero channels triggers an infinite loop with a resultant NULL pointer…
Affected: through 14.4.2
Showing 4