SE
Vendor
Sound Exchange Project
1 product with CVEs on record
27
CVEs
0
On KEV
0
New 30D
Products
Recent CVEs
CVEProductCVSSEPSSPublishedSummary
CVE-2023-34432
SE
Sound Exchange
Sound Exchange Project
7.8
0%
Jul 10A heap buffer overflow vulnerability was found in sox, in the lsx_readbuf function at sox/src/formats_i.c:98:16
CVE-2023-34318
SE
Sound Exchange
Sound Exchange Project
7.8
0%
Jul 10A heap buffer overflow vulnerability was found in sox, in the startread function at sox/src/hcom.c:160:41
CVE-2023-32627
SE
Sound Exchange
Sound Exchange Project
5.5
0%
Jul 10A floating point exception vulnerability was found in sox, in the read_samples function at sox/src/voc.c:334:18
CVE-2023-26590
SE
Sound Exchange
Sound Exchange Project
5.5
0%
Jul 10A floating point exception vulnerability was found in sox, in the lsx_aiffstartwrite function at sox/src/aiff.c:622:58
CVE-2021-33844
SE
Sound Exchange
Sound Exchange Project
5.5
0%
Aug 25A floating point exception (divide-by-zero) issue was discovered in SoX in functon startread() of wav.c file
CVE-2021-23210
SE
Sound Exchange
Sound Exchange Project
5.5
0%
Aug 25A floating point exception (divide-by-zero) issue was discovered in SoX in functon read_samples() of voc.c file
CVE-2021-23172
SE
Sound Exchange
Sound Exchange Project
5.5
0%
Aug 25A vulnerability was found in SoX, where a heap-buffer-overflow occurs in function startread() in hcom.c file
CVE-2021-23159
SE
Sound Exchange
Sound Exchange Project
5.5
0%
Aug 25A vulnerability was found in SoX, where a heap-buffer-overflow occurs in function lsx_read_w_buf() in formats_i.c file
CVE-2022-31651
SE
Sound Exchange
Sound Exchange Project
5.5
1%
May 25In SoX 14.4.2, there is an assertion failure in rate_init in rate.c in libsox.a
CVE-2022-31650
SE
Sound Exchange
Sound Exchange Project
5.5
1%
May 25In SoX 14.4.2, there is a floating-point exception in lsx_aiffstartwrite in aiff.c in libsox.a
CVE-2021-3643
SE
Sound Exchange
Sound Exchange Project
9.1
2%
May 2A flaw was found in sox 14.4.1
CVE-2021-40426
SE
Sound Exchange
Sound Exchange Project
8.8
2%
Apr 14A heap-based buffer overflow vulnerability exists in the sphere.c start_read() functionality of Sound Exchange libsox 14.4.2 and master commit 42b3557e
CVE-2019-1010004
SE
Sound Exchange
Sound Exchange Project
5.5
1%
Jul 15SoX - Sound eXchange 14.4.2 and earlier is affected by: Out-of-bounds Read
CVE-2019-13590
SE
Sound Exchange
Sound Exchange Project
5.5
1%
Jul 14An issue was discovered in libsox.a in SoX 14.4.2
CVE-2019-8355
SE
Sound Exchange
Sound Exchange Project
5.5
2%
Feb 15An issue was discovered in SoX 14.4.2
CVE-2019-8357
SE
Sound Exchange
Sound Exchange Project
5.5
2%
Feb 15An issue was discovered in SoX 14.4.2
CVE-2019-8356
SE
Sound Exchange
Sound Exchange Project
5.5
2%
Feb 15An issue was discovered in SoX 14.4.2
CVE-2019-8354
SE
Sound Exchange
Sound Exchange Project
5.0
2%
Feb 15An issue was discovered in SoX 14.4.2
CVE-2017-18189
SE
Sound Exchange
Sound Exchange Project
7.5
5%
Feb 15In the startread function in xa.c in Sound eXchange (SoX) through 14.4.2, a corrupt header specifying zero channels triggers an infinite loop with a resultant NULL pointer…
CVE-2017-15642
SE
Sound Exchange
Sound Exchange Project
5.5
1%
Oct 19In lsx_aiffstartread in aiff.c in Sound eXchange (SoX) 14.4.2, there is a Use-After-Free vulnerability triggered by supplying a malformed AIFF file
CVE-2017-15372
SE
Sound Exchange
Sound Exchange Project
5.5
2%
Oct 16There is a stack-based buffer overflow in the lsx_ms_adpcm_block_expand_i function of adpcm.c in Sound eXchange (SoX) 14.4.2
CVE-2017-15371
SE
Sound Exchange
Sound Exchange Project
5.5
2%
Oct 16There is a reachable assertion abort in the function sox_append_comment() in formats.c in Sound eXchange (SoX) 14.4.2
CVE-2017-15370
SE
Sound Exchange
Sound Exchange Project
5.5
2%
Oct 16There is a heap-based buffer overflow in the ImaExpandS function of ima_rw.c in Sound eXchange (SoX) 14.4.2
CVE-2017-11359
SE
Sound Exchange
Sound Exchange Project
5.5
7%
Jul 31The wavwritehdr function in wav.c in Sound eXchange (SoX) 14.4.2 allows remote attackers to cause a denial of service (divide-by-zero error and application crash) via a crafted…
CVE-2017-11358
SE
Sound Exchange
Sound Exchange Project
5.5
7%
Jul 31The read_samples function in hcom.c in Sound eXchange (SoX) 14.4.2 allows remote attackers to cause a denial of service (invalid memory read and application crash) via a crafted…
CVE-2017-11332
SE
Sound Exchange
Sound Exchange Project
5.5
7%
Jul 31The startread function in wav.c in Sound eXchange (SoX) 14.4.2 allows remote attackers to cause a denial of service (divide-by-zero error and application crash) via a crafted wav…
CVE-2014-8145
SE
Sound Exchange
Sound Exchange Project
–
8%
Dec 31Multiple heap-based buffer overflows in Sound eXchange (SoX) 14.4.1 and earlier allow remote attackers to have unspecified impact via a crafted WAV file to the (1) start_read or…