Summary
Thuan Pham, Marcel Böhme, Andrew Santosa and Alexandru Razvan Caciulescu
discovered that WavPack incorrectly handled certain .wav files. An
attacker could possibly use this to execute arbitrary code or cause a
denial of service. (CVE-2018-10536, CVE-2018-10537)
Thuan Pham, Marcel Böhme, Andrew Santosa and Alexandru Razvan Caciulescu
discovered that WavPack incorrectly handled certain .wav files. An
attacker could possibly use this to cause a denial of service.
(CVE-2018-10538, CVE-2018-10539, CVE-2018-10540)
Fixed packages 1
| Release | Package | Fixed in |
|---|---|---|
| Ubuntu · 18.04 LTS 18.04:LTS | wavpack | 5.1.0-2ubuntu1.1 |
Vulnerabilities 5
-
Unscored —
An issue was discovered in WavPack 5.1.0 and earlier. The WAV parser component contains a vulnerability that allows wri…
-
Unscored —
An issue was discovered in WavPack 5.1.0 and earlier. The W64 parser component contains a vulnerability that allows wri…
-
Unscored —
An issue was discovered in WavPack 5.1.0 and earlier for WAV input. Out-of-bounds writes can occur because ParseRiffHea…
-
Unscored —
An issue was discovered in WavPack 5.1.0 and earlier for DSDiff input. Out-of-bounds writes can occur because ParseDsdi…
-
Unscored —
An issue was discovered in WavPack 5.1.0 and earlier for W64 input. Out-of-bounds writes can occur because ParseWave64H…