PatchTheCVEsound exchange project vulnerabilities
Recent CVEs affecting sound exchange project products. 4 tracked.
sound exchange project has 4 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 1. Most recent: 2023-07-10. Highest priority: CVE-2023-34432 (score 46/100).
- CVE-2023-34432 HIGH 7.8 UPGRADE DOWNGRADE A heap buffer overflow vulnerability was found in sox, in the lsx_readbuf function at sox/src/formats_i.c:98:1
- CVE-2023-34318 HIGH 7.8 DOWNGRADE DOWNGRADE A heap buffer overflow vulnerability was found in sox, in the startread function at sox/src/hcom.c:160:41
- CVE-2023-32627 MEDIUM 6.2 DOWNGRADE DOWNGRADE A floating point exception vulnerability was found in sox, in the read_samples function at sox/src/voc.c:334:1
- CVE-2023-26590 MEDIUM 6.2 DOWNGRADE DOWNGRADE A floating point exception vulnerability was found in sox, in the lsx_aiffstartwrite function at sox/src/aiff.
FAQ
How do I fix sound exchange project vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is sound exchange project being exploited right now?
None of the tracked sound exchange project CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which sound exchange project CVE should I patch first?
CVE-2023-34432 currently ranks highest (46/100): A heap buffer overflow vulnerability was found in sox, in the lsx_readbuf function at sox/src/formats_i.c:98:1.