Skip to content

PatchFirst · Latest vulnerabilities

sox vulnerabilities

Vulnerability published for sox in the last 30 days: 1. Listed in the KEV catalogue: 0.

RSS ↗ JSON ↗

Vulnerabilities: 3

CVE-2026-111157
Medium · CVSS 6.9EPSS 0.13%No fix published
SoX through 14.4.2 Heap Out-of-Bounds Write via MS ADPCM WAV Decoding
SoX through 14.4.2 contains a heap out-of-bounds write vulnerability in lsx_ms_adpcm_block_expand_i() in src/adpcm.c, triggered by an odd samplesPerBlock value in the WAV fmt chunk. Attackers can supply a crafted MS ADPCM WAV file to sox or any libsox consumer to write a partially controlled 16-bit sample past the heap buffer allocated by wav_ms_adpcm_fmt().
sox Operating systems
Published October 15, 2026Updated October 16, 2026
Source advisory 1 ↗Source advisory 2 ↗Source advisory 3 ↗
CVE-2021-23210
Medium · CVSS 5.5EPSS 0.46%No fix published
CVE-2021-23210
A floating point exception (divide-by-zero) issue was discovered in SoX in functon read_samples() of voc.c file. An attacker with a crafted file, could cause an application to crash.
sox Operating systems
Published August 25, 2022Updated August 3, 2024
Source advisory 1 ↗Source advisory 2 ↗Source advisory 3 ↗
CVE-2022-31651
Medium · CVSS 5.5EPSS 1.16%No fix published
CVE-2022-31651
In SoX 14.4.2, there is an assertion failure in rate_init in rate.c in libsox.a.
sox Operating systems
Published May 25, 2022Updated August 3, 2024
Source advisory 1 ↗Source advisory 2 ↗Source advisory 3 ↗

Check your server

Check your installed stack and versions against the current vulnerability feeds.

Check your server →