Out-of-bounds Write Vulnerability in Sox_ng Product by Vendor Sox_ng
CVE-2026-129264

5.1MEDIUM

Key Information:

Vendor: Sox_ng
Status: Sox Ng
Vendor: CVE Published:; 14 November 2026

Badges

👾 Exploit Exists🟡 Public PoC

What is CVE-2026-129264?

A security flaw has been identified in the Sox_ng product, specifically in the VOC Decoder component where the function read_samples_voc is located. This vulnerability can lead to an out-of-bounds write, which may allow an attacker to manipulate memory beyond intended boundaries. Such manipulation can be exploited remotely, posing a significant risk to users. A patch has been released to address this issue, and users are advised to update their versions promptly to ensure security.

Affected Version(s)

sox_ng 14.8.0

sox_ng 14.8.1

Exploit Proof of Concept (PoC)

PoC code is written by security researchers to demonstrate the vulnerability can be exploited. PoC code is also a key component for weaponization which could lead to ransomware.

CVE-2026-129264 - Proof of Concept