THREATIST.IORead the docs No WavPack vulnerabilities are listed in CISA KEV.
17 records in Wavpack · all components
The ParseCaffHeaderConfig function of the cli/caff.c file of WavPack 5.1.0 allows a remote attacker to cause a denial-of-service (global buffer over-read), or possibly trigger a buffer overflow or incorrect memory alloca…
The ParseDsdiffHeaderConfig function of the cli/dsdiff.c file of WavPack 5.1.0 allows a remote attacker to cause a denial-of-service (heap-based buffer over-read) or possibly overwrite the heap via a maliciously crafted…
A stack-based buffer over-read in the ParseRiffHeaderConfig function of cli/riff.c file of WavPack 5.1.0 allows a remote attacker to cause a denial-of-service attack or possibly have unspecified other impact via a malici…
An issue was discovered in WavPack 5.1.0 and earlier.
An issue was discovered in WavPack 5.1.0 and earlier.
WavpackSetConfiguration64 in pack_utils.c in libwavpack.a in WavPack through 5.1.0 has a "Conditional jump or move depends on uninitialised value" condition, which might allow attackers to cause a denial of service (appl…
WavPack 5.3.0 has an out-of-bounds write in WavpackPackSamples in pack_utils.c because of an integer overflow in a malloc argument.
The function WavpackVerifySingleBlock in open_utils.c in libwavpack.a in WavPack through 5.1.0 allows attackers to cause a denial-of-service (out-of-bounds read and application crash) via a crafted WavPack Lossless Audio…
The function WavpackPackInit in pack_utils.c in libwavpack.a in WavPack through 5.1.0 allows attackers to cause a denial-of-service (resource exhaustion caused by an infinite loop) via a crafted wav audio file because Wa…
WavPack 5.1.0 and earlier is affected by: CWE-457: Use of Uninitialized Variable.
WavPack 5.1.0 and earlier is affected by: CWE-457: Use of Uninitialized Variable.
WavPack 5.1 and earlier is affected by: CWE 369: Divide by Zero.
An issue was discovered in WavPack 5.1.0 and earlier for W64 input.
An issue was discovered in WavPack 5.1.0 and earlier for DSDiff input.
An issue was discovered in WavPack 5.1.0 and earlier for WAV input.
An out of bounds read was found in Wavpack 5.4.0 in processing *.WAV files.
A null pointer dereference bug was found in wavpack-5.4.0 The results from the ASAN log: AddressSanitizer:DEADLYSIGNAL ===================================================================84257==ERROR: AddressSanitizer: SE…