Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

17 records

TI-2022-02287 CVE-2022-2476 · GHSA-62q3-hj99-8qw6

NULL pointer dereference in Wavpack

Priority LOW 25

A null pointer dereference bug was found in wavpack-5.4.0 The results from the ASAN log: AddressSanitizer:DEADLYSIGNAL ===================================================================84257==ERROR: AddressSanitizer: SE…

CVSS 3.1MEDIUM 5.5 Local No auth User interaction EPSS 0.00376 Published 2022-07-19 Fix deferred CWE-476
TI-2019-16077 CVE-2019-1010317 · GHSA-7wf6-38w5-gjg5

Use of uninitialized resource in WavPack

Priority LOW 28

WavPack 5.1.0 and earlier is affected by: CWE-457: Use of Uninitialized Variable.

CVSS 3.1MEDIUM 5.5 Local No auth User interaction EPSS 0.01468 Published 2019-07-11 Fixed CWE-457
TI-2019-16078 CVE-2019-1010319 · GHSA-m7x8-vqr5-hrmv

Use of uninitialized resource in WavPack

Priority LOW 28

WavPack 5.1.0 and earlier is affected by: CWE-457: Use of Uninitialized Variable.

CVSS 3.1MEDIUM 5.5 Local No auth User interaction EPSS 0.01516 Published 2019-07-11 Fixed CWE-457
Priority LOW 34

WavpackSetConfiguration64 in pack_utils.c in libwavpack.a in WavPack through 5.1.0 has a "Conditional jump or move depends on uninitialised value" condition, which might allow attackers to cause a denial of service (appl…

CVSS 3.1MEDIUM 6.5 Network No auth User interaction EPSS 0.02949 Published 2019-04-24 Partial fix CWE-824
Priority MEDIUM 46

The ParseCaffHeaderConfig function of the cli/caff.c file of WavPack 5.1.0 allows a remote attacker to cause a denial-of-service (global buffer over-read), or possibly trigger a buffer overflow or incorrect memory alloca…

CVSS 3.0HIGH 7.8 Local No auth User interaction EPSS 0.09802 Published 2018-02-19 No fix listed CWE-125