Floating Point Exception in SoX Affects Multiple Platforms
CVE-2021-23210

5.5MEDIUM

Key Information:

Vendor

Sox Project

Status
Sox (sound Exchange)
Vendor
CVE Published:
25 August 2022

What is CVE-2021-23210?

A vulnerability exists in SoX's read_samples() function within the voc.c file, where a specially crafted file can trigger a divide-by-zero condition. This flaw may lead to unexpected application behavior, including crashes. Attackers can exploit this vulnerability by providing malicious input, thereby compromising system reliability and stability.

Affected Version(s)

SoX (Sound eXchange) Not Known

References

https://bugzilla.redhat.com/show_bug.cgi?id=1975670
x_refsource_MISC
https://access.redhat.com/security/cve/CVE-2021-23210
x_refsource_MISC
https://sourceforge.net/p/sox/bugs/351/
x_refsource_MISC

CVSS V3.1

Score:
5.5
Severity:
MEDIUM
Confidentiality:
None
Integrity:
None
Availability:
None
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.