Skip to content
OpenAdvisories

Vendor

SoX

1 known vulnerabilities.

Products

sox 1
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 6.1
    CVE-2026-111157

    SoX through 14.4.2 Heap Out-of-Bounds Write via MS ADPCM WAV Decoding

    SoX through 14.4.2 contains a heap out-of-bounds write vulnerability in lsx_ms_adpcm_block_expand_i() in src/adpcm.c, triggered by an odd samplesPerBlock value in the WAV fmt chunk. Attackers can supply a crafted MS ADPCM WAV file to sox or any libsox consume…

    SoX sox sox sox Debian Ubuntu