https://vulnerability.circl.lu/rss/recent/all/10 Most recent entries from all 2026-10-05T05:10:02.474075+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent entries. https://vulnerability.circl.lu/vuln/cve-2019-13590 CVE-2019-13590 2026-10-05T05:10:02.641674+00:00

An issue was discovered in libsox.a in SoX 14.4.2. In sox-fmt.h (startread function), there is an integer overflow on the result of integer addition (wraparound to 0) fed into the lsx_calloc macro that wraps malloc. When a NULL pointer is returned, it is used without a prior check that it is a valid pointer, leading to a NULL pointer dereference on lsx_readbuf in formats_i.c.

 https://vulnerability.circl.lu/vuln/usn-5904-1 USN-5904-1 — sox vulnerabilities 2026-10-05T05:10:02.641780+00:00

Affected: Ubuntu:Pro:14.04:LTS: sox, Ubuntu:Pro:16.04:LTS: sox, Ubuntu:18.04:LTS: sox, Ubuntu:20.04:LTS: sox, Ubuntu:22.04:LTS: sox

Helmut Grohne discovered that SoX incorrectly handled certain inputs. If a user or an automated system were tricked into opening a specially crafted input file, a remote attacker could possibly use this issue to cause a denial of service. This issue only affected Ubuntu 14.04 ESM, Ubuntu 16.04 ESM, and Ubuntu 18.04 LTS. (CVE-2019-13590)

Helmut Grohne discovered that SoX incorrectly handled certain inputs. If a user or an automated system were tricked into opening a specially crafted input file, a remote attacker could possibly use this issue to cause a denial of service. (CVE-2021-23159, CVE-2021-23172, CVE-2021-23210, CVE-2021-33844, CVE-2021-3643, CVE-2021-40426, CVE-2022-31650, and CVE-2022-31651)