Threats affecting pkg:github/sox_ng/sox_ng

CVE-2026-129264 is an out-of-bounds write vulnerability in the sox_ng software affecting versions 14.8.0 and 14.8.1. The flaw exists in the read_samples_voc function within the VOC Decoder component. This vulnerability can be exploited remotely and has publicly disclosed exploit code. A patch identified by commit 0b40408b has been released to fix the issue.