What’s Vulnerable › Vulnerabilities

CVE-2019-1010004

• Severity: medium (CVSS 5.5 v3.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 1.3% probability of exploitation in the next 30 days
• Public exploit or detection template: yes
• Published: 2019-07-15 · updated 2026-06-17
• Weakness: CWE-125

Description

SoX - Sound eXchange 14.4.2 and earlier is affected by: Out-of-bounds Read. The impact is: Denial of Service. The component is: read_samples function at xa.c:219. The attack vector is: Victim must open specially crafted .xa file. NOTE: this may overlap CVE-2017-18189.

Affected products

• SoX (Sound eXchange): through 14.4.2

References

• https://sourceforge.net/p/sox/bugs/299/
• https://sourceforge.net/p/sox/code/ci/master/tree/src/xa.c#l219
• https://sourceforge.net/p/sox/bugs/299/
• https://sourceforge.net/p/sox/code/ci/master/tree/src/xa.c#l219

Get alerted when CVE-2019-1010004 or the next vulnerability affects your stack