Skip to content
Noroxi

WavPack records

17 published records for vendor wavpack.

Researcher profile

Entered KEV
0 · 0%
Weaponized
0 · 0%
Pre-auth RCE
0
With a fix record
100%
Median publish → KEV
No record has entered KEV

Records by year

  1. 18
  2. 19
  3. 20
  4. 22

Bar: total · dark part: CISA KEV.

Recurring classes

The weakness classes this vendor ships most often: where to look.

CWE

Attack profile

All records

17 records
  • CVE-2018-7254
    34Monitor

    The ParseCaffHeaderConfig function of the cli/caff.c file of WavPack 5.1.0 allows a remote attacker to cause a denial-of-service (global buf

    HighCVSS 7.8Proof of conceptEPSS 10%

    wavpack · wavpackFeb 19, 2018

  • CVE-2018-6767
    32Monitor

    A stack-based buffer over-read in the ParseRiffHeaderConfig function of cli/riff.c file of WavPack 5.1.0 allows a remote attacker to cause a

    HighCVSS 7.8No exploitEPSS 3%

    wavpack · wavpackFeb 6, 2018

  • CVE-2018-7253
    32Monitor

    The ParseDsdiffHeaderConfig function of the cli/dsdiff.c file of WavPack 5.1.0 allows a remote attacker to cause a denial-of-service (heap-b

    HighCVSS 7.8No exploitEPSS 3%

    wavpack · wavpackFeb 19, 2018

  • CVE-2018-10537
    32Monitor

    An issue was discovered in WavPack 5.1.0 and earlier.

    HighCVSS 7.8No exploitEPSS 2%

    wavpack · wavpackApr 29, 2018

  • CVE-2018-10536
    32Monitor

    An issue was discovered in WavPack 5.1.0 and earlier.

    HighCVSS 7.8No exploitEPSS 2%

    wavpack · wavpackApr 29, 2018

  • CVE-2019-11498
    27Monitor

    WavpackSetConfiguration64 in pack_utils.c in libwavpack.a in WavPack through 5.1.0 has a "Conditional jump or move depends on uninitialised

    MediumCVSS 6.5No exploitEPSS 3%

    wavpack · wavpackApr 24, 2019

  • CVE-2020-35738
    24Monitor

    WavPack 5.3.0 has an out-of-bounds write in WavpackPackSamples in pack_utils.c because of an integer overflow in a malloc argument.

    MediumCVSS 6.1No exploitEPSS 1%

    wavpack · wavpackDec 28, 2020

  • CVE-2018-19841
    23Monitor

    The function WavpackVerifySingleBlock in open_utils.c in libwavpack.a in WavPack through 5.1.0 allows attackers to cause a denial-of-service

    MediumCVSS 5.5No exploitEPSS 3%

    wavpack · wavpackDec 4, 2018

  • CVE-2018-19840
    23Monitor

    The function WavpackPackInit in pack_utils.c in libwavpack.a in WavPack through 5.1.0 allows attackers to cause a denial-of-service (resourc

    MediumCVSS 5.5No exploitEPSS 2%

    wavpack · wavpackDec 4, 2018

  • CVE-2018-10539
    22Monitor

    An issue was discovered in WavPack 5.1.0 and earlier for DSDiff input.

    MediumCVSS 5.5No exploitEPSS 2%

    wavpack · wavpackApr 29, 2018

  • CVE-2018-10540
    22Monitor

    An issue was discovered in WavPack 5.1.0 and earlier for W64 input.

    MediumCVSS 5.5No exploitEPSS 2%

    wavpack · wavpackApr 29, 2018

  • CVE-2018-10538
    22Monitor

    An issue was discovered in WavPack 5.1.0 and earlier for WAV input.

    MediumCVSS 5.5No exploitEPSS 2%

    wavpack · wavpackApr 29, 2018

  • CVE-2019-1010315
    22Monitor

    WavPack 5.1 and earlier is affected by: CWE 369: Divide by Zero.

    MediumCVSS 5.5No exploitEPSS 2%

    wavpack · wavpackJul 11, 2019

  • CVE-2019-1010319
    22Monitor

    WavPack 5.1.0 and earlier is affected by: CWE-457: Use of Uninitialized Variable.

    MediumCVSS 5.5No exploitEPSS 2%

    wavpack · wavpackJul 11, 2019

  • CVE-2019-1010317
    22Monitor

    WavPack 5.1.0 and earlier is affected by: CWE-457: Use of Uninitialized Variable.

    MediumCVSS 5.5No exploitEPSS 1%

    wavpack · wavpackJul 11, 2019

  • CVE-2021-44269
    22Monitor

    An out of bounds read was found in Wavpack 5.4.0 in processing *.WAV files.

    MediumCVSS 5.5No exploitEPSS 1%

    wavpack · wavpackMar 10, 2022

  • CVE-2022-2476
    22Monitor

    A null pointer dereference bug was found in wavpack-5.4.0 The results from the ASAN log: AddressSanitizer:DEADLYSIGNAL =====================

    MediumCVSS 5.5No exploitEPSS 0%

    wavpack · wavpackJul 19, 2022