Heap overflow in hcom.c

Brought to you by: cbagwell, mansr, robs, rrt, uklauer

#350 Heap overflow in hcom.c

Status: open

Owner: nobody

Labels: bug (6)

Priority: 5

Updated: 2025-03-02

Created: 2021-04-20

Creator: treebacker

Private: No

There is a heap overflow in hcom.c:161. Function startread.
With crafted hcomn file, the vuln is exploitable.
Trigger command: ./src/.libs/sox bug2 -n noiseprof /dev/null

In AddressSanitizer:

In gdb:

The crafted file is attached.

1 Attachments

bug2

Discussion

Jan Starý - 2023-02-13

$ sox ~/Downloads/sox-zero.hcom -n noiseprof /dev/null sox FAIL formats: can't open input file `/Users/hans/Downloads/sox-zero.hcom': premature EOF
If you would like to refer to this comment somewhere else in this project, copy and paste the following link:

Martin Guy - 2025-03-02

This is CVE-2021-23172
Absent in 14.4.2, Debian and sox_ng
Present in 42b355 and sox.sf.net master

Last edit: Martin Guy 2025-03-02

If you would like to refer to this comment somewhere else in this project, copy and paste the following link:

Heap overflow in hcom.c

Searches

Help

#350 Heap overflow in hcom.c

Discussion