Global Buffer Overflow in Sox 14.4.1 Affects Multiple Systems
CVE-2021-3643

9.1CRITICAL

Key Information:

Vendor

Sox Project

Status
Sox
Vendor
CVE Published:
2 May 2022

What is CVE-2021-3643?

A vulnerability has been identified in Sox version 14.4.1, specifically within the lsx_adpcm_init function of the libsox library. This flaw results in a global buffer overflow, permitting attackers to craft malicious input files. If exploited, this vulnerability could lead to unauthorized access to sensitive information contained within the system, posing significant risks to data integrity and confidentiality.

Affected Version(s)

sox sox 14.4.1

References

https://bugzilla.redhat.com/show_bug.cgi?id=1980626
x_refsource_MISC

CVSS V3.1

Score:
9.1
Severity:
CRITICAL
Confidentiality:
High
Integrity:
None
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.