Logo
›
›vulnerability›CVE-2021-33844
Name
CVE-2021-33844
Source
NVD ( link)Debian ( link)
Description
A floating point exception (divide-by-zero) issue was discovered in SoX in functon startread() of wav.c file. An attacker with a crafted wav file, could cause an application to crash.
CWEs
CWE-369 CWE-369
Published Date
Updated Date
Workaround
-
Advisories
https://access.redhat.com/security/cve/CVE-2021-33844Third Party Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=1975664Issue Tracking
https://security.archlinux.org/CVE-2021-33844Third Party Advisory
https://sourceforge.net/p/sox/bugs/349/Exploit
https://access.redhat.com/security/cve/CVE-2021-33844Third Party Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=1975664Issue Tracking
https://security.archlinux.org/CVE-2021-33844Third Party Advisory
https://sourceforge.net/p/sox/bugs/349/Exploit

Analysis#

Affected Component
Analysis
sox
Patched

Vulnerability Rating#

5.5
CVSSv31

Others affected components#

Name
Project
Project Version
Version
Status
sox
buildroot
2025.02.x
7524160b29a476f7e87bc14fddf12d349f9a3c5e
Not Affected
sox
buildroot
master
7524160b29a476f7e87bc14fddf12d349f9a3c5e
Not Affected
sox_ng
openwrt
master
14.5.1.1-r1
Not Affected
sox_ng
openwrt
openwrt-25.12
14.5.1.1-r1
Not Affected
sox
yocto
kirkstone
14.4.2
Not Affected
sox
yocto
scarthgap
14.4.2
Not Affected

Resolved with patches#

sox (yocto:master)

#
Title
Author
Resolve
1
wav: reject 0 bits per sample to avoid division by zero
Helmut Grohne <helmut@subdivi.de>
CVE-2021-33844