Medium severity5.5NVD Advisory· Published Oct 19, 2017· Updated Jun 17, 2026
CVE-2017-15642
CVE-2017-15642
Description
In lsx_aiffstartread in aiff.c in Sound eXchange (SoX) 14.4.2, there is a Use-After-Free vulnerability triggered by supplying a malformed AIFF file.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
6- cpe:2.3:a:sound_exchange_project:sound_exchange:14.4.2:*:*:*:*:*:*:*
- Range: =14.4.2
- osv-coords2 versionspkg:rpm/opensuse/sox&distro=openSUSE%20Tumbleweedpkg:rpm/suse/sox&distro=SUSE%20Package%20Hub%2012%20SP3
< 14.4.2-5.17+ 1 more
- (no CPE)range: < 14.4.2-5.17
- (no CPE)range: < 14.4.2-5.1
Patches
Vulnerability mechanics
References
5- lists.debian.org/debian-lts-announce/2017/11/msg00043.htmlnvdMailing ListThird Party Advisory
- lists.debian.org/debian-lts-announce/2019/02/msg00042.htmlnvdMailing ListThird Party Advisory
- security.gentoo.org/glsa/201810-02nvdThird Party Advisory
- sourceforge.net/p/sox/bugs/297/nvdBroken LinkIssue TrackingThird Party Advisory
- sourceforge.net/p/sox/bugs/298/nvdBroken LinkIssue TrackingThird Party Advisory
News mentions
0No linked articles in our index yet.