CVE-2019-8357: Sound Exchange Project Sound Exchange

Medium severity, CVSS 5.5. EPSS: 1.6% chance of exploitation in the next 30 days.

An issue was discovered in SoX 14.4.2. lsx_make_lpf in effect_i_dsp.c allows a NULL pointer dereference.

Affected products

• Sound Exchange Project Sound Exchange: version 14.4.2 only

Published 2019-02-15. Last modified 2026-06-17.