RHSA-2020:1581

WavpackSetConfiguration64 in pack_utils.c in libwavpack.a in WavPack through 5.1.0 has a "Conditional jump or move depends on uninitialised value" condition, which might allow attackers to cause a denial of service (appl…

The function WavpackVerifySingleBlock in open_utils.c in libwavpack.a in WavPack through 5.1.0 allows attackers to cause a denial-of-service (out-of-bounds read and application crash) via a crafted WavPack Lossless Audio…

The function WavpackPackInit in pack_utils.c in libwavpack.a in WavPack through 5.1.0 allows attackers to cause a denial-of-service (resource exhaustion caused by an infinite loop) via a crafted wav audio file because Wa…

WavPack 5.1.0 and earlier is affected by: CWE-457: Use of Uninitialized Variable.

WavPack 5.1.0 and earlier is affected by: CWE-457: Use of Uninitialized Variable.

WavPack 5.1 and earlier is affected by: CWE 369: Divide by Zero.