Sound eXchange Project Sound eXchange 14.4.2
Approved changes feed: RSS · Atom
cpe:2.3:a:sound_exchange_project:sound_exchange:14.4.2:*:*:*:*:*:*:*part: a version: 14.4.2 update: *
| Vendor | Sound Exchange Project (1cb0f1ed-375d-5550-a718-fdd7a969135e) |
|---|---|
| Product | Sound Exchange (f9d54ebb-e5fd-5ab9-82de-5c00a3d867c2) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
Notes
Imported from NVD CPE 2.0 feed
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
pkg:deb/debian/sox |
purl2cpe | 2026-06-01 10:16:13.256523 |
pkg:deb/ubuntu/sox |
purl2cpe | 2026-06-01 10:16:13.256524 |
pkg:github/rbouqueau/sox |
purl2cpe | 2026-06-01 10:16:13.256526 |
pkg:rpm/fedora/sox |
purl2cpe | 2026-06-01 10:16:13.256527 |
pkg:rpm/opensuse/sox |
purl2cpe | 2026-06-01 10:16:13.256528 |
pkg:sourceforge/sox |
purl2cpe | 2026-06-01 10:16:13.256530 |
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2022-31651 |
vulnerable | 2026-06-08 05:43:43.352595 |
Details available
In SoX 14.4.2, there is an assertion failure in rate_init in rate.c in libsox.a.
Published: 2022-05-25T00:00:00.000Z
Updated: 2024-08-03T07:26:00.878Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-31650 |
vulnerable | 2026-06-08 05:43:43.351985 |
Details available
In SoX 14.4.2, there is a floating-point exception in lsx_aiffstartwrite in aiff.c in libsox.a.
Published: 2022-05-25T00:00:00.000Z
Updated: 2024-08-03T07:26:00.926Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-40426 |
vulnerable | 2026-06-08 05:35:17.959072 |
Details available
CRITICAL (10)
A heap-based buffer overflow vulnerability exists in the sphere.c start_read() functionality of Sound Exchange libsox 14.4.2 and master commit 42b3557e. A specially-crafted file can lead to a heap buffer overflow. An attacker can provide a malicious file to trigger this vulnerability.
Published: 2022-04-14T19:56:21.568Z
Updated: 2025-04-15T19:07:04.751Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-8357 |
vulnerable | 2026-06-08 05:14:23.939793 |
Details available
An issue was discovered in SoX 14.4.2. lsx_make_lpf in effect_i_dsp.c allows a NULL pointer dereference.
Published: 2019-02-15T23:00:00.000Z
Updated: 2024-08-04T21:17:30.581Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-8356 |
vulnerable | 2026-06-08 05:14:23.939453 |
Details available
An issue was discovered in SoX 14.4.2. One of the arguments to bitrv2 in fft4g.c is not guarded, such that it can lead to write access outside of the statically declared array, aka a stack-based buffer overflow.
Published: 2019-02-15T23:00:00.000Z
Updated: 2024-08-04T21:17:31.147Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-8355 |
vulnerable | 2026-06-08 05:14:23.938976 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-8354 |
vulnerable | 2026-06-08 05:14:23.935910 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-13590 |
vulnerable | 2026-06-08 05:12:52.172978 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2017-15642 |
vulnerable | 2026-06-08 05:08:59.347553 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2017-15372 |
vulnerable | 2026-06-08 05:08:58.795810 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2017-15371 |
vulnerable | 2026-06-08 05:08:58.795394 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2017-15370 |
vulnerable | 2026-06-08 05:08:58.794871 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2017-11359 |
vulnerable | 2026-06-08 05:08:37.354466 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2017-11358 |
vulnerable | 2026-06-08 05:08:37.354003 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2017-11332 |
vulnerable | 2026-06-08 05:08:37.182604 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.
Inspect record JSON
Open this panel to browse, search, copy or download the JSON record.