CVE-2019-8356: Sound Exchange Project Sound Exchange

Medium severity, CVSS 5.5. EPSS: 1.8% chance of exploitation in the next 30 days.

An issue was discovered in SoX 14.4.2. One of the arguments to bitrv2 in fft4g.c is not guarded, such that it can lead to write access outside of the statically declared array, aka a stack-based buffer overflow.

Affected products

• Sound Exchange Project Sound Exchange: version 14.4.2 only

Published 2019-02-15. Last modified 2026-06-17.