cvedb.io
CVE-2021-3643
CRITICAL · CVSS 9.1
EPSS exploitation probability: 0%
Published 2022-05-02T19:15:08.290 · Last modified 2026-06-17T04:05:29.747

Summary

A flaw was found in sox 14.4.1. The lsx_adpcm_init function within libsox leads to a global-buffer-overflow. This flaw allows an attacker to input a malicious file, leading to the disclosure of sensitive information.

Affected products

sound_exchange_project — sound_exchange

Does this affect you?

Add your gear to cvedb and we'll alert you only when sound_exchange_project ships something exploited.

Check my exposure →

References

This product uses data from the NVD API but is not endorsed or certified by the NVD. Informational only; not professional security advice.