Debian/sox: medium 5.5
In lsx_aiffstartread in aiff.c in Sound eXchange (SoX) 14.4.2, there is a Use-After-Free vulnerability triggered by supplying a malformed AIFF file.
Action: Upgrade sox to 14.4.2-2 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 14.4.2-2 | - |
Fixed versions
| 14.4.2-2 |
Sources
published · modified · JSON