CVE-2021-23172: Sound Exchange Project Sound Exchange

Medium severity, CVSS 5.5. EPSS: 0.5% chance of exploitation in the next 30 days.

A vulnerability was found in SoX, where a heap-buffer-overflow occurs in function startread() in hcom.c file. The vulnerability is exploitable with a crafted hcomn file, that could cause an application to crash.

Affected products

• Sound Exchange Project Sound Exchange: version 14.4.2-7 only

Published 2022-08-25. Last modified 2026-06-17.