CVE-2021-33844: A floating point exception (divide-by-zero) issue was discovered in SoX in functon startread() of wav.c file. An attacker with a crafted wav file, could cause…

medium5.5CVSS 3.1

AVLACLPRNUIRSUCNINAH

A floating point exception (divide-by-zero) issue was discovered in SoX in functon startread() of wav.c file. An attacker with a crafted wav file, could cause an application to crash.

Affected

2 ranges

Vendor	Product	Version range	Fixed in
debian	sox	< sox 14.4.2+git20190427-3.1 (bookworm)	sox 14.4.2+git20190427-3.1 (bookworm)
sound_exchange_project	sound_exchange	—	—

CVSS provenance

nvdv3.15.5MEDIUMCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

osv5.5MEDIUM