Sign In
Advisories

SoX 14.4.2 Denial of Service Vulnerability via WAV File Processing

Go Back
severity
medium
date
Affecting

  • SoX 14.4.2

CWE
  • CWE-369 Divide By Zero
CVSS
6.7
CVSS V4 Vector
CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:A/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N
Credit
LiquidWorm as Gjoko Krstic of Zero Science Lab
Description
SoX 14.4.2 contains a division by zero vulnerability when handling WAV files that can cause program crashes. Attackers can trigger a floating point exception by providing a specially crafted WAV file that causes arithmetic errors during sound file processing.