{"affected":[{"product":"sox_ng","source":"CNA: VulDB","vendor":"n/a","versions":[{"status":"affected","version":"14.8.0"},{"status":"affected","version":"14.8.1"}]}],"cveId":"CVE-2026-129264","cwes":["CWE-787","CWE-119"],"description":"A security vulnerability has been detected in sox_ng up to 14.8.1. Affected by this issue is the function read_samples_voc of the file src/voc.c of the component VOC Decoder. Such manipulation leads to out-of-bounds write. The attack can be executed remotely. The exploit has been disclosed publicly and may be used. The name of the patch is 0b40408b. A patch should be applied to remediate this issue. The vendor was contacted early, responded in a very professional manner and quickly released a fixed version of the affected product.","epss":null,"exploits":[{"kind":"exploit","source":"CNA: VulDB","url":"https://codeberg.org/suyuanwang/Test_sox/"}],"kev":null,"metrics":[{"score":5.1,"severity":"medium","source":"CNA: VulDB","vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:P/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P","version":"4.0"},{"score":5.5,"severity":"medium","source":"CNA: VulDB","vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:L/E:P/RL:O/RC:C","version":"3.1"},{"score":5.5,"severity":"medium","source":"CNA: VulDB","vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:L/E:P/RL:O/RC:C","version":"3.0"},{"score":6.5,"severity":"medium","source":"CNA: VulDB","vector":"AV:N/AC:L/Au:S/C:P/I:P/A:P/E:POC/RL:OF/RC:C","version":"2.0"}],"modifiedAt":1794675642958,"publishedAt":1794675642958,"references":[{"source":"CNA: VulDB","tags":["vdb-entry","technical-description"],"url":"https://vuldb.com/vuln/437307"},{"source":"CNA: VulDB","tags":["signature","permissions-required"],"url":"https://vuldb.com/vuln/437307/cti"},{"source":"CNA: VulDB","tags":["third-party-advisory"],"url":"https://vuldb.com/cve/CVE-2026-129264"},{"source":"CNA: VulDB","tags":["third-party-advisory"],"url":"https://vuldb.com/submit/1043408"},{"source":"CNA: VulDB","tags":["broken-link","issue-tracking"],"url":"https://codeberg.org/sox_ng/sox_ng/issues/873"},{"source":"CNA: VulDB","tags":["broken-link","exploit"],"url":"https://codeberg.org/suyuanwang/Test_sox/"},{"source":"CNA: VulDB","tags":["patch"],"url":"https://codeberg.org/sox_ng/sox_ng/commit/0b40408b"}],"remediation":[{"kind":"fix","source":"CNA: VulDB","text":"The reporting source identifies this reference as a patch. Check the advisory for affected versions and supported release branches.","url":"https://codeberg.org/sox_ng/sox_ng/commit/0b40408b"}],"revision":"59bfb1d357e68e97f599272db58eb69e1143c5c0cd44f9444d5a32fce31dd885","sources":[{"modifiedAt":1794675642958,"name":"CNA: VulDB","retrievedAt":1794676101295,"url":"https://www.cve.org/CVERecord?id=CVE-2026-129264"}],"ssvc":null,"status":"published","title":"sox_ng VOC Decoder voc.c read_samples_voc out-of-bounds write","updatedAt":1794676101295}