CVE-2023-26590CWE-1077
Floating point exception in src/aiff.c
Medium · published July 10, 2023
What it is
A floating point exception vulnerability was found in sox, in the lsx_aiffstartwrite function at sox/src/aiff.c:622:58. This flaw can lead to a denial of service.
The record
Technical detail
- CVSS v3.1
- 6.2 · MEDIUM
- Vector
- CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
- CVSS v4.0
- Not supplied
- EPSS
- 0.00207 · 10.2th percentile
- Weakness
- CWE-1077 · Floating Point Comparison with Incorrect Operator
- Published
- 2023-07-10T17:14Z
EPSS history
Timeline