Published: 19 October 2017
In lsx_aiffstartread in aiff.c in Sound eXchange (SoX) 14.4.2, there is a Use-After-Free vulnerability triggered by supplying a malformed AIFF file.
From the Ubuntu Security Team
It was discovered that SoX incorrectly handled certain media files. An attacker could possibly use this issue to cause a denial of service or other unspecified impact.
Severity score breakdown