Threats tagged 'ghsa-gwh5-2vhj-gvcc'

A security vulnerability in sox_ng up to version 14.8.1 affects the VOC Decoder component, specifically the read_samples_voc function in src/voc.c. This flaw allows an out-of-bounds write, which can be triggered remotely. The vulnerability has a medium severity with a CVSS score of 5.5. A patch identified by commit 0b40408b has been released by the vendor, who responded promptly and professionally. Exploit code has been publicly disclosed, but no confirmed exploitation in the wild is reported.