Medium severity5.0NVD Advisory· Published Feb 15, 2019· Updated Jun 17, 2026
CVE-2019-8354
CVE-2019-8354
Description
An issue was discovered in SoX 14.4.2. lsx_make_lpf in effect_i_dsp.c has an integer overflow on the result of multiplication fed into malloc. When the buffer is allocated, it is smaller than expected, leading to a heap-based buffer overflow.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
7- Range: <=14.4.2
- cpe:2.3:a:sound_exchange_project:sound_exchange:14.4.2:*:*:*:*:*:*:*
cpe:2.3:o:canonical:ubuntu_linux:16.04:*:*:*:esm:*:*:*+ 2 more
- cpe:2.3:o:canonical:ubuntu_linux:16.04:*:*:*:esm:*:*:*
- cpe:2.3:o:canonical:ubuntu_linux:18.04:*:*:*:esm:*:*:*
- cpe:2.3:o:canonical:ubuntu_linux:19.04:*:*:*:*:*:*:*
- Range: <14.4.2
Patches
Vulnerability mechanics
References
4- lists.debian.org/debian-lts-announce/2019/05/msg00040.htmlnvdMailing ListThird Party Advisory
- sourceforge.net/p/sox/bugs/319nvdIssue TrackingThird Party Advisory
- usn.ubuntu.com/4079-1/nvdThird Party Advisory
- usn.ubuntu.com/4079-2/nvdThird Party Advisory
News mentions
0No linked articles in our index yet.