{
  "cveId": "CVE-2019-8356",
  "url": "https://patchblox.com/security/cve/CVE-2019-8356",
  "summary": "CVE-2019-8356 is fixed in 9 products on 1 platform, first by libsox-fmt-all 14.4.2-3ubuntu0.18.04.1, released February 14, 2019. It is not reported as exploited. Patch Radar priority: Routine.",
  "title": "libsox3: An issue was discovered in SoX 14.4.2",
  "description": "An issue was discovered in SoX 14.4.2. One of the arguments to bitrv2 in fft4g.c is not guarded, such that it can lead to write access outside of the statically declared array, aka a stack-based buffer overflow.",
  "published": "2019-02-14T16:00:00Z",
  "severity": "Medium",
  "epss": 0.018,
  "epssPercentile": 0.7862,
  "priority": "Routine",
  "priorityTier": 4,
  "exploited": false,
  "vendorExploited": false,
  "disclosed": false,
  "fixes": [
    {
      "platform": "linux",
      "product": "libsox-fmt-all",
      "release": "Ubuntu 18.04.6 LTS (bionic)",
      "fixedVersion": "14.4.2-3ubuntu0.18.04.1",
      "fix": "libsox-fmt-all 14.4.2-3ubuntu0.18.04.1",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-bionic-libsox-fmt-all-14.4.2-3ubuntu0.18.04.1",
      "released": "2019-02-14T16:00:00Z"
    },
    {
      "platform": "linux",
      "product": "libsox-fmt-alsa",
      "release": "Ubuntu 18.04.6 LTS (bionic)",
      "fixedVersion": "14.4.2-3ubuntu0.18.04.1",
      "fix": "libsox-fmt-alsa 14.4.2-3ubuntu0.18.04.1",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-bionic-libsox-fmt-alsa-14.4.2-3ubuntu0.18.04.1",
      "released": "2019-02-14T16:00:00Z"
    },
    {
      "platform": "linux",
      "product": "libsox-fmt-ao",
      "release": "Ubuntu 18.04.6 LTS (bionic)",
      "fixedVersion": "14.4.2-3ubuntu0.18.04.1",
      "fix": "libsox-fmt-ao 14.4.2-3ubuntu0.18.04.1",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-bionic-libsox-fmt-ao-14.4.2-3ubuntu0.18.04.1",
      "released": "2019-02-14T16:00:00Z"
    },
    {
      "platform": "linux",
      "product": "libsox-fmt-base",
      "release": "Ubuntu 18.04.6 LTS (bionic)",
      "fixedVersion": "14.4.2-3ubuntu0.18.04.1",
      "fix": "libsox-fmt-base 14.4.2-3ubuntu0.18.04.1",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-bionic-libsox-fmt-base-14.4.2-3ubuntu0.18.04.1",
      "released": "2019-02-14T16:00:00Z"
    },
    {
      "platform": "linux",
      "product": "libsox-fmt-mp3",
      "release": "Ubuntu 18.04.6 LTS (bionic)",
      "fixedVersion": "14.4.2-3ubuntu0.18.04.1",
      "fix": "libsox-fmt-mp3 14.4.2-3ubuntu0.18.04.1",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-bionic-libsox-fmt-mp3-14.4.2-3ubuntu0.18.04.1",
      "released": "2019-02-14T16:00:00Z"
    },
    {
      "platform": "linux",
      "product": "libsox-fmt-oss",
      "release": "Ubuntu 18.04.6 LTS (bionic)",
      "fixedVersion": "14.4.2-3ubuntu0.18.04.1",
      "fix": "libsox-fmt-oss 14.4.2-3ubuntu0.18.04.1",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-bionic-libsox-fmt-oss-14.4.2-3ubuntu0.18.04.1",
      "released": "2019-02-14T16:00:00Z"
    },
    {
      "platform": "linux",
      "product": "libsox-fmt-pulse",
      "release": "Ubuntu 18.04.6 LTS (bionic)",
      "fixedVersion": "14.4.2-3ubuntu0.18.04.1",
      "fix": "libsox-fmt-pulse 14.4.2-3ubuntu0.18.04.1",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-bionic-libsox-fmt-pulse-14.4.2-3ubuntu0.18.04.1",
      "released": "2019-02-14T16:00:00Z"
    },
    {
      "platform": "linux",
      "product": "libsox3",
      "release": "Ubuntu 18.04.6 LTS (bionic)",
      "fixedVersion": "14.4.2-3ubuntu0.18.04.1",
      "fix": "libsox3 14.4.2-3ubuntu0.18.04.1",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-bionic-libsox3-14.4.2-3ubuntu0.18.04.1",
      "released": "2019-02-14T16:00:00Z"
    },
    {
      "platform": "linux",
      "product": "sox",
      "release": "Ubuntu 18.04.6 LTS (bionic)",
      "fixedVersion": "14.4.2-3ubuntu0.18.04.1",
      "fix": "sox 14.4.2-3ubuntu0.18.04.1",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-bionic-sox-14.4.2-3ubuntu0.18.04.1",
      "released": "2019-02-14T16:00:00Z"
    }
  ],
  "noFixYet": [],
  "dataAsOf": "2026-11-07T18:46:35Z",
  "attribution": {
    "text": "Data: Patchblox Patch Radar",
    "url": "https://patchblox.com/security/patch-radar",
    "terms": "https://patchblox.com/security/patch-radar/use-the-data"
  }
}