Vulnerabilidades de SoX
CVEs publicadas que afetam produtos de SoX: 1 registro(s), com severidade, exploração e correções.
CVE-2026-111157
Média · 6.1
CWE-787 15/10/2026
SoX through 14.4.2 Heap Out-of-Bounds Write via MS ADPCM WAV Decoding
SoX through 14.4.2 contains a heap out-of-bounds write vulnerability in lsx_ms_adpcm_block_expand_i() in src/adpcm.c, triggered by an odd samplesPerBlock value in the WAV fmt chunk. Attackers can supply a crafted MS ADPCM WAV file to sox or any libsox consumer to write a partially controlled 16-bit sample past the heap buffer allocated by wav_ms_adpcm_fmt().