CVE-2023-34318

HighCVSS 7.8

Published: 10/07/2023(UTC)Updated: 17/06/2026(UTC)Translated: 18/06/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.27%

19th percentile - higher than 19% of all known CVEs

Summary

A heap buffer overflow vulnerability was found in sox, in the startread function. This flaw can lead to denial of service, code execution, or information disclosure.

Risk Assessment

The organization may be exposed to attacks that could result in service disruption, unauthorized system access, or data leakage.

Recommendation

It is recommended to update the sox software to the latest version to mitigate this vulnerability and to monitor systems for unauthorized activities.

Other vulnerabilities in sox

CVE-2023-34432High
A heap buffer overflow vulnerability was found in sox, in the lsx_readbuf function. This flaw can lead to denial of service, code execution, or information disclosure.

Original NVD description (English source)

A heap buffer overflow vulnerability was found in sox, in the startread function at sox/src/hcom.c:160:41. This flaw can lead to a denial of service, code execution, or information disclosure.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS