CVE-2026-129264 | sox_ng up to 14.8.1 VOC Decoder src/voc.c read_samples_voc out-of-bounds write (Issue 873 / 0b40408b)

A vulnerability, which was classified as problematic, was found in sox_ng up to 14.8.1. Affected by this issue is the function read_samples_voc of the file src/voc.c of the component VOC Decoder. Such manipulation leads to out-of-bounds write.

This vulnerability is documented as CVE-2026-129264. The attack can be executed remotely. Additionally, an exploit exists.

A patch should be applied to remediate this issue.

The vendor was contacted early, responded in a very professional manner and quickly released a fixed version of the affected product.VulDB Recent EntriesRead More