Floating Point Exception in SoX Affects Red Hat and Other Distributions
CVE-2021-33844

5.5MEDIUM

Key Information:

Vendor

Sox Project

Status
Sox (sound Exchange)
Vendor
CVE Published:
25 August 2022

What is CVE-2021-33844?

A floating point exception vulnerability exists in SoX within the startread() function of the wav.c file. Attackers can exploit this flaw by crafting a specially designed WAV file, which, when processed, may lead to an application crash. This vulnerability poses significant risks as it can disrupt service availability and compromise system integrity.

Affected Version(s)

SoX (Sound eXchange) Not Known

References

https://bugzilla.redhat.com/show_bug.cgi?id=1975664
x_refsource_MISC
https://access.redhat.com/security/cve/CVE-2021-33844
x_refsource_MISC
https://sourceforge.net/p/sox/bugs/349/
x_refsource_MISC

CVSS V3.1

Score:
5.5
Severity:
MEDIUM
Confidentiality:
None
Integrity:
None
Availability:
None
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.