CVE-2019-8356: Buffer Overflow
An issue was discovered in SoX 14.4.2. One of the arguments to bitrv2 in fft4g.c is not guarded, such that it can lead to write access outside of the statically declared array, aka a stack-based buffer overflow.
Affected Software
Event History
Frequently Asked Questions
What is CVE-2019-8356?
CVE-2019-8356 is a vulnerability in SoX 14.4.2 that can lead to a stack-based buffer overflow.
How severe is CVE-2019-8356?
CVE-2019-8356 has a severity rating of 5.5, which is considered medium.
What is the affected software?
The affected software is SoX 14.4.2 and potentially other versions.
How can I fix CVE-2019-8356?
To fix CVE-2019-8356, update SoX to version 14.4.2 or higher.
Where can I find more information on CVE-2019-8356?
More information on CVE-2019-8356 can be found at the following links: [MITRE](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-8356), [SourceForge](https://sourceforge.net/p/sox/bugs/321), [Ubuntu Security Notice](https://ubuntu.com/security/notices/USN-4079-1).