An issue exists in SoX 14.4.2. lsx_make_lpf in effect_i_dsp.c allows a NULL pointer dereference.
sound exchange project sound exchange 14.4.2