Security Advisory

CVE-2019-1010317

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2019-07-11 19:24:40

Last updated 2024-08-05 03:07:18

Assigner dwf

CVSS score not scored

State PUBLISHED

Description

WavPack 5.1.0 and earlier is affected by: CWE-457: Use of Uninitialized Variable. The impact is: Unexpected control flow, crashes, and segfaults. The component is: ParseCaffHeaderConfig (caff.c:486). The attack vector is: Maliciously crafted .wav file. The fixed version is: After commit https://github.com/dbry/WavPack/commit/f68a9555b548306c5b1ee45199ccdc4a16a6101b.

← Browse all CVEs View on cve.org ↗