CVE-2023-34432

HighCVSS 7.8

Published: 10/07/2023(UTC)Updated: 17/06/2026(UTC)Translated: 18/06/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.39%

30th percentile - higher than 30% of all known CVEs

Summary

A heap buffer overflow vulnerability was found in sox, in the lsx_readbuf function. This flaw can lead to denial of service, code execution, or information disclosure.

Risk Assessment

The organization may be exposed to attacks that could result in system downtime, unauthorized access to data, or execution of malicious code.

Recommendation

It is recommended to update the sox software to the latest version to mitigate this vulnerability and to monitor systems for unauthorized activities.

Other vulnerabilities in sox

CVE-2023-34318High
A heap buffer overflow vulnerability was found in sox, in the startread function. This flaw can lead to denial of service, code execution, or information disclosure.

Original NVD description (English source)

A heap buffer overflow vulnerability was found in sox, in the lsx_readbuf function at sox/src/formats_i.c:98:16. This flaw can lead to a denial of service, code execution, or information disclosure.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS