CVE-2019-1010319

2019-07-1120:15:00

Alpine Linux Development Team

security.alpinelinux.org

0.001 Low

EPSS

Percentile

49.9%

JSON

WavPack 5.1.0 and earlier is affected by: CWE-457: Use of Uninitialized Variable. The impact is: Unexpected control flow, crashes, and segfaults. The component is: ParseWave64HeaderConfig (wave64.c:211). The attack vector is: Maliciously crafted .wav file. The fixed version is: After commit https://github.com/dbry/WavPack/commit/33a0025d1d63ccd05d9dbaa6923d52b1446a62fe.

OSVersionArchitecturePackageVersionFilename
Alpineedge-communitynoarchwavpack< 5.1.0-r8UNKNOWN
Alpine3.10-mainnoarchwavpack< 5.1.0-r8UNKNOWN
Alpine3.11-mainnoarchwavpack< 5.1.0-r8UNKNOWN
Alpine3.12-communitynoarchwavpack< 5.1.0-r8UNKNOWN
Alpine3.13-communitynoarchwavpack< 5.1.0-r8UNKNOWN
Alpine3.14-communitynoarchwavpack< 5.1.0-r8UNKNOWN
Alpine3.15-communitynoarchwavpack< 5.1.0-r8UNKNOWN
Alpine3.16-communitynoarchwavpack< 5.1.0-r8UNKNOWN
Alpine3.17-communitynoarchwavpack< 5.1.0-r8UNKNOWN
Alpine3.18-communitynoarchwavpack< 5.1.0-r8UNKNOWN

OS	Version	Architecture	Package	Version	Filename
Alpine	edge-community	noarch	wavpack	< 5.1.0-r8	UNKNOWN
Alpine	3.10-main	noarch	wavpack	< 5.1.0-r8	UNKNOWN
Alpine	3.11-main	noarch	wavpack	< 5.1.0-r8	UNKNOWN
Alpine	3.12-community	noarch	wavpack	< 5.1.0-r8	UNKNOWN
Alpine	3.13-community	noarch	wavpack	< 5.1.0-r8	UNKNOWN
Alpine	3.14-community	noarch	wavpack	< 5.1.0-r8	UNKNOWN
Alpine	3.15-community	noarch	wavpack	< 5.1.0-r8	UNKNOWN
Alpine	3.16-community	noarch	wavpack	< 5.1.0-r8	UNKNOWN
Alpine	3.17-community	noarch	wavpack	< 5.1.0-r8	UNKNOWN
Alpine	3.18-community	noarch	wavpack	< 5.1.0-r8	UNKNOWN