SO
Product
sox
by SoX · last CVE Oct 15, 2026
2
CVEs
0
On KEV
6.1
Max CVSS
1
New 30D
Severity mix
Critical 0High 0Medium 1Low 0
Watch

Add sox to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2026-111157
6.1
0%
Oct 15
SoX through 14.4.2 Heap Out-of-Bounds Write via MS ADPCM WAV Decoding
Affected: through 14.4.2
CVE-2004-0557
–
25%
Aug 6
Multiple buffer overflows in the st_wavstartread function in wav.c for Sound eXchange (SoX) 12.17.2 through 12.17.4 allow remote attackers to execute arbitrary code via certain…
Affected: 12.17.2; 12.17.3; 12.17.4
Showing 2