While reproducing original reported CVE-2021-23210 which was for a FPE [1], we encountered this global-buffer-overflow (READ) issue which was triggerred using the same reproducer, this issue lies in the libsox component as well hence requesting a different CVE for this issue so it can be tracked accordingly [1] https://sourceforge.net/p/sox/bugs/351/
Created sox tracking bugs for this issue: Affects: epel-8 [bug 1993269] Affects: fedora-all [bug 1993268]
This bug is now closed. Further updates for individual products will be reflected on the CVE page(s): https://access.redhat.com/security/cve/cve-2021-3643