CVE-2023-34318
A heap buffer overflow vulnerability was found in sox, in the startread function at sox/src/hcom.c:160:41. This flaw can lead to a denial of service, code execution, or information disclosure.
Affects 4 products across 3 vendors.
Buffer overflow corrupting dynamically allocated heap memory, exploitable for arbitrary code execution.
Software writes data past buffer boundaries, corrupting memory and potentially enabling code execution.
Mapping is CWE-to-CAPEC per MITRE CAPEC 3.9.
A heap buffer overflow vulnerability in the sox application's startread function can lead to denial of service, code execution, or information disclosure.
BSID: BS-2023-GLOBAL-057563-H • Model: /workspace/models/qwen2.5-coder-32b-instruct-bf16 • Confidence: HIGH
Is this CVE in your environment?
BreachSpider monitors your ICS/OT environment for vulnerabilities like this one. No agents or network access required. Free to start.
Check My Environment →What is CVE-2023-34318?
What is the CVSS score for CVE-2023-34318?
Is CVE-2023-34318 actively exploited?
How do I remediate CVE-2023-34318?
What systems are affected by CVE-2023-34318?
| CVE ID | CVE-2023-34318 |
|---|---|
| BSID | BS-2023-GLOBAL-057563-H BreachSpider Global ID |
| CVSS Vector | CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H |
| Published | 2023-07-10 |
| Last Modified | 2025-06-27 |
| ICS Relevance | 15% |
| Weakness (CWE) | |
| Source | NVD |
A heap buffer overflow vulnerability was found in sox, in the startread function at sox/src/hcom.c:160:41. This flaw can lead to a denial of service, code execution, or information disclosure.
Source: NIST NVD / MITRE CVE Database
The vulnerability exists in the startread function at sox/src/hcom.c:160:41, where improper handling of input data can cause a heap buffer overflow.
Exploitation Likelihood: HIGH
| Vendor | Product | Affected Versions |
|---|---|---|
| Fedoraproject | Fedora | 38 |
| Fedoraproject | Extra Packages For Enterprise Linux | 8.0 |
| Redhat | Enterprise Linux | 6.0 7.0 |
| Sound Exchange Project | Sound Exchange | 14.4.3 |
| CISA known-exploited | Not in KEV catalog |
|---|---|
| Public Exploit | Not confirmed |
| PoC Code | Not confirmed |
AI Enrichment Record — provenance & audit hash
| Model | /workspace/models/qwen2.5-coder-32b-instruct-bf16 |
|---|---|
| Confidence | HIGH |
| Enriched At | 2026-05-24 |
| SHA-512 Audit Hash | 7f1af6d01e5fe75958439dec75a987c59685c3603a7dd7e2ff0f7e6b38def8eac7d56bb1f1c8913626850af7191bda4e74a59c079e2be485d204dbc7f81eadd4 |
ICS/OT Vulnerability Intelligence for Your Environment
BreachSpider tracks 384,000+ CVEs and matches them to your ICS/OT assets by exact version, with AI analysis, NERC CIP mapping, and vendor PSIRT contacts.
Create a free account →