A flaw was found in sox 14.4.2. The read_samples function in hcom.c in Sound eXchange(SoX) 14.4.2 can cause a denial of service(invalid memory read and application crash) via a crafted hcom file. References: http://seclists.org/fulldisclosure/2017/Jul/81
Created sox tracking bugs for this issue: Affects: fedora-all [bug 1480678]