An issue was discovered in SoX 14.4.2. lsxmakelpf in effectidsp.c allows a NULL pointer dereference.
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2019-8357.json"
[ { "events": [ { "introduced": "0" }, { "last_affected": "14.4.2" } ] } ]