Vulnerability Spotlight: Heap overflow in Sound Exchange libsox library
Cisco Talos discovered an exploitable heap-based buffer overflow in the start_read() functionality of sphere.c in the Sound Exchange libsox library, tracked as TALOS-2021-1434 (CVE-2021-40426), which an attacker can trigger by providing a malicious file....