Unrated

An issue was discovered in WavPack 5.1.0 and earlier. The WAV parser component contains a vulnerability that allows writing to memory because ParseRif...

CVE-2018-10536 First seen on SecPulse Apr 30, 2018

Fix status by distribution

Fixed packages published by each distribution for this CVE

Debian DEBIAN-CVE-2018-10536 wavpack Fixed in: 5.1.0-3

Original description The description as published by the source.

An issue was discovered in WavPack 5.1.0 and earlier. The WAV parser component contains a vulnerability that allows writing to memory because ParseRiffHeaderConfig in riff.c does not reject multiple format chunks.

Source: OSV.dev (Open Source Vulnerabilities) NVD OSV

References

advisory usn.ubuntu.com
advisory debian.org
patch github.com
report github.com
report github.com
report github.com
web packetstormsecurity.com
web lists.fedoraproject.org
web lists.fedoraproject.org
web seclists.org

Key facts

Severity: Unrated
Published: Apr 30, 2018
First seen on SecPulse: Apr 30, 2018

NVD OSV

Detection sources

OSV.dev (Open Source Vulnerabilities)Oct 20, 22:32