PT-2022-6475 · Sox+4 · Sox+4

Published 2022-04-14 · Updated 2025-06-24 · CVE-2021-40426

Positive Technologies (AI Summary)

CVSS v3.1

10

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions SoX versions 14.4.2 and earlier

Description The issue is related to a heap-based buffer overflow in the start read() function of the Sound Exchange libsox. This can be triggered by a specially-crafted file, potentially allowing a remote attacker to access sensitive data, compromise its integrity, and cause a denial of service.

Recommendations For SoX version 14.4.2, consider disabling the start read() function until a patch is available to prevent exploitation. For versions prior to 14.4.2, restrict access to the sphere.c module to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Memory Corruption

Heap Based Buffer Overflow

Weakness Enumeration

CWE-787

CWE-122

Related Identifiers

ALT-PU-2024-6289

ALT-PU-2024-6378

ALT-PU-2024-6855

ALT-PU-2024-6966

BDU:2023-01700

CVE-2021-40426

DLA-3315-1

DLA-3315-2

DSA-5356-1

DSA-5356-2

MGASA-2023-0059

OPENSUSE-SU-2023:0328-1

OPENSUSE-SU-2023:0329-1

OPENSUSE-SU-2024:13359-1

USN-5904-1

Affected Products

Alt Linux

Astra Linux

Linuxmint

Sox

Ubuntu

References · 56

• 🔥 https://talosintelligence.com/vulnerability_reports/TALOS-2021-1434 · Exploit
• https://osv.dev/vulnerability/openSUSE-SU-2024:13359-1 · Vendor Advisory
• https://debian.org/security/2023/dsa-5356 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2021-40426 · Security Note
• https://bdu.fstec.ru/vul/2023-01700 · Security Note
• https://osv.dev/vulnerability/CVE-2021-40426 · Vendor Advisory
• https://osv.dev/vulnerability/DSA-5356-2 · Vendor Advisory
• https://osv.dev/vulnerability/DLA-3315-2 · Vendor Advisory
• https://ubuntu.com/security/CVE-2021-3643 · Vendor Advisory
• https://osv.dev/vulnerability/DLA-3315-1 · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2021-40426 · Vendor Advisory
• https://ubuntu.com/security/CVE-2021-23159 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2021-40426 · Security Note
• https://wiki.astralinux.ru/astra-linux-se47-bulletin-2023-0316SE47MD · Vendor Advisory
• https://osv.dev/vulnerability/MGASA-2023-0059 · Vendor Advisory