Logo
vulnerabilityCVE-2022-31651
Name
CVE-2022-31651
Source
NVD ( link)Debian ( link)
Description
In SoX 14.4.2, there is an assertion failure in rate_init in rate.c in libsox.a.
Published Date
Updated Date
Workaround
-

Analysis#


Affected Component
Analysis
sox
Patched

Vulnerability Ratings#


5.5
CVSSv31
4.3
CVSSv2

Others affected components#


Name
Project
Project Version
Version
Status
buildroot
master
7524160b29a476f7e87bc14fddf12d349f9a3c5e
Patched
openwrt
master
14.5.1.1-r1
Not Affected
openwrt
openwrt-25.12
14.5.1.1-r1
Not Affected
yocto
kirkstone
14.4.2
Exploitable
yocto
master
14.4.2+git
Patched
yocto
scarthgap
14.4.2
Exploitable

Resolved with patches#


sox (buildroot:2025.02.x)

#
Title
Author
Resolve
1
formats: reject implausible rate
Helmut Grohne <helmut@subdivi.de>
CVE-2022-31651

sox (buildroot:master)

#
Title
Author
Resolve
1
formats: reject implausible rate
Helmut Grohne <helmut@subdivi.de>
CVE-2022-31651

sox (yocto:master)

#
Title
Author
Resolve
1
formats: reject implausible rate
Helmut Grohne <helmut@subdivi.de>
CVE-2022-31651