-
Notifications
You must be signed in to change notification settings - Fork 0
Security
VxSound is currently a development-preview project. Security fixes target the latest code on main and the latest published preview build.
| Version | Security support |
|---|---|
Latest main / latest preview |
Supported |
| Older preview artifacts | Update to the latest build first |
Please do not publish exploit details in a public issue before maintainers have had a reasonable opportunity to review the problem.
Use GitHub's private vulnerability-reporting/security-advisory flow for this repository when available. Include:
- affected commit/version;
- Windows version and architecture;
- clear reproduction steps;
- security impact;
- whether user interaction is required;
- relevant logs or minimal proof-of-concept material;
- any suggested mitigation.
Do not include unrelated private files, listening-history data, credentials or copyrighted third-party media.
The current VxSound preview:
- runs as a user-mode desktop application;
- does not ship a VxSound kernel audio driver;
- does not automatically download or flash device firmware;
- does not silently rewrite every Windows audio route;
- validates imported VxSound profile JSON before use;
- bounds listening-test and profile values;
- regenerates imported profile IDs;
- keeps personal listening data separate from shareable sound-profile export;
- validates allowed official support-link hosts before opening them.
Digital clipping protection does not establish safe acoustic listening level. Headphone sensitivity, amplifier gain and physical fit are outside VxSound's knowledge. Start listening tests and reference clips at a low, comfortable level.
If a vulnerability is in an upstream dependency, include the dependency name and advisory/CVE when known. Required dependency license notices remain in THIRD_PARTY_NOTICES.md.