CVE-2022-31650 — Incorrect Comparison in Exchange Project Sound Exchange

CWE-697 — Incorrect ComparisonCWE-1077 — Floating Point Comparison with Incorrect Operator11 documents7 sources
Severity
5.5MEDIUMNVD
EPSS
0.1%
top 77.58%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
1
Sound Exchange Project Sound Exchange
Timeline
PublishedMay 25
Latest updateMay 5

Description

In SoX 14.4.2, there is a floating-point exception in lsx_aiffstartwrite in aiff.c in libsox.a.

CVSS vector

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:HExploitability: 1.8 | Impact: 3.6

Affected Packages1 packages

🔴Vulnerability Details

5
OSV
sox regression↗2023-03-20
▶
OSV
sox vulnerabilities↗2023-03-02
▶
GHSA
GHSA-49wq-h6fq-vf8p: In SoX 14↗2022-05-26
▶
OSV
CVE-2022-31650: In SoX 14↗2022-05-25
▶
CVEList
CVE-2022-31650: In SoX 14↗2022-05-25
▶

📋Vendor Advisories

5
Red Hat
sox: floating point exception in src/aiff.c↗2023-05-05
▶
Ubuntu
SoX regression↗2023-03-20
▶
Ubuntu
SoX vulnerabilities↗2023-03-02
▶
Red Hat
sox: a floating-point exception in lsx_aiffstartwrite in aiff.c in libsox.a↗2022-04-14
▶
Debian
CVE-2022-31650: sox - In SoX 14.4.2, there is a floating-point exception in lsx_aiffstartwrite in aiff...↗2022
▶
CVE-2022-31650 — Incorrect Comparison | cvebase