CVE-2021-23210

MediumCVSS 5.5/10Last modified Jun 17, 2026

Description

A floating point exception (divide-by-zero) issue was discovered in SoX in functon read_samples() of voc.c file. An attacker with a crafted file, could cause an application to crash.

Metrics

CVSS 3.1 5.5/10CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

Weakness enumeration

CWE-369

Affected software

Vendor	Product	Versions
n/a	SoX (Sound eXchange)	Not Known

References

https://access.redhat.com/security/cve/CVE-2021-23210Third Party Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=1975670Issue Tracking, Third Party Advisory
https://security.archlinux.org/CVE-2021-23210Third Party Advisory
https://sourceforge.net/p/sox/bugs/351/Exploit, Third Party Advisory
https://access.redhat.com/security/cve/CVE-2021-23210Third Party Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=1975670Issue Tracking, Third Party Advisory
https://security.archlinux.org/CVE-2021-23210Third Party Advisory
https://sourceforge.net/p/sox/bugs/351/Exploit, Third Party Advisory

Timeline

Published: Aug 25, 2022
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2021

CVE-2021-232114.4Cleartext Storage of Sensitive Information in Memory vulnerability in Gallagher Command Centre Server allows Cloud end-to-end encryption key CVE-2021-232148.1When the server is configured to use trust authentication with a clientcert requirement or to use cert authentication, a man-in-the-middle a CVE-2021-232155.5An integer overflow leading to a heap-buffer overflow was found in the DwaCompressor of OpenEXR in versions before 3.0.1. An attacker could CVE-2021-232177.5NVIDIA GPU and Tegra hardware contain a vulnerability in the internal microcontroller, which may allow a user with elevated privileges to in CVE-2021-232187.5When running with FIPS mode enabled, Mirantis Container Runtime 20.10.8 leaks memory during TLS Handshakes which could be abused to cause a CVE-2021-232194.1NVIDIA GPU and Tegra hardware contain a vulnerability in the internal microcontroller, which may allow a user with elevated privileges to ac CVE-2021-23228.8Vulnerability in OpenGrok (component: Web App). Versions that are affected are 1.6.7 and prior. Easily exploitable vulnerability allows low CVE-2021-232225.9A man-in-the-middle attacker can inject false responses to the client's first few queries, despite the use of SSL certificate verification a CVE-2021-232237.8Improper initialization for some Intel(R) PROSet/Wireless WiFi and Killer(TM) WiFi products may allow a privileged user to potentially enabl CVE-2021-232255.4Cacti 1.1.38 allows authenticated users with User Management permissions to inject arbitrary web script or HTML in the "new_username" field CVE-2021-232278.8Cross-Site Request Forgery (CSRF) vulnerability in Alexander Fuchs PHP Everywhere plugin <= 2.0.2 versions.CVE-2021-232286.1DIAEnergie Version 1.7.5 and prior is vulnerable to a reflected cross-site scripting attack through error pages that are returned by “.NET R