CVE-2022-31650: Medium severity sox (sound exchange) vulnerability
In SoX 14.4.2, there is a floating-point exception in lsxaiffstartwrite in aiff.c in libsox.a.
Affected Software
Event History
Frequently Asked Questions
What is CVE-2022-31650?
CVE-2022-31650 is a vulnerability in SoX 14.4.2 that causes a floating-point exception in lsx_aiffstartwrite in aiff.c in libsox.a.
What is the severity of CVE-2022-31650?
The severity of CVE-2022-31650 is medium with a severity value of 5.5.
How does CVE-2022-31650 impact SoX?
CVE-2022-31650 can cause a floating-point exception in SoX 14.4.2, which may lead to crashes or other unpredictable behavior.
How can I fix CVE-2022-31650 in SoX?
To fix CVE-2022-31650 in SoX, update to version 14.4.2+git20190427-1+deb10u3, 14.4.2+git20190427-2+deb11u2, or 14.4.2+git20190427-3.5.
Where can I find more information about CVE-2022-31650?
You can find more information about CVE-2022-31650 at the following references: [Security Tracker](https://security-tracker.debian.org/tracker/CVE-2022-31650), [SoX Bugs](https://sourceforge.net/p/sox/bugs/360/)