Ulf Harnhammar has reported two vulnerabilities in SoX, which potentially can be exploited by malicious people to compromise a user's system.

The vulnerabilities are caused due to boundary errors within the "st_wavstartread()" function when processing ".WAV" file headers and can be exploited to cause stack-based buffer overflows.

Successful exploitation requires that a user is tricked into playing a malicious ".WAV" file with a large value in a length field.

The vulnerabilities have been reported in versions 12.17.4, 12.17.3, and 12.17.2. Older versions are reportedly not affected.

Solution
Don't play untrusted ".WAV" files.

Provided and/or discovered by
Ulf Harnhammar

Deep Links
Links available in Customer Area