What’s Vulnerable › Vulnerabilities

CVE-2019-8356

• Severity: medium (CVSS 5.5 v3.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 1.8% probability of exploitation in the next 30 days
• Public exploit or detection template: yes
• Published: 2019-02-15 · updated 2026-06-17
• Weakness: CWE-129

Description

An issue was discovered in SoX 14.4.2. One of the arguments to bitrv2 in fft4g.c is not guarded, such that it can lead to write access outside of the statically declared array, aka a stack-based buffer overflow.

Affected products

• SoX (Sound eXchange): 14.4.2

References

• https://lists.debian.org/debian-lts-announce/2019/05/msg00040.html
• https://sourceforge.net/p/sox/bugs/321
• https://usn.ubuntu.com/4079-1/
• https://usn.ubuntu.com/4079-2/
• https://lists.debian.org/debian-lts-announce/2019/05/msg00040.html
• https://sourceforge.net/p/sox/bugs/321
• https://usn.ubuntu.com/4079-1/
• https://usn.ubuntu.com/4079-2/

Get alerted when CVE-2019-8356 or the next vulnerability affects your stack