Lucene search

K
cvelistMitreCVELIST:CVE-2018-19840
HistoryDec 04, 2018 - 9:00 a.m.

CVE-2018-19840

2018-12-0409:00:00
mitre
raw.githubusercontent.com
1

5.2 Medium

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

56.2%

The function WavpackPackInit in pack_utils.c in libwavpack.a in WavPack through 5.1.0 allows attackers to cause a denial-of-service (resource exhaustion caused by an infinite loop) via a crafted wav audio file because WavpackSetConfiguration64 mishandles a sample rate of zero.