CVE-2019-1010315

2019-07-1119:34:35

dwf

www.cve.org

wavpack

divide by zero

parsedsdiffheaderconfig

.wav file

github commit

AI Score

5.7

Confidence

High

EPSS

0.002

Percentile

58.6%

JSON

WavPack 5.1 and earlier is affected by: CWE 369: Divide by Zero. The impact is: Divide by zero can lead to sudden crash of a software/service that tries to parse a .wav file. The component is: ParseDsdiffHeaderConfig (dsdiff.c:282). The attack vector is: Maliciously crafted .wav file. The fixed version is: After commit https://github.com/dbry/WavPack/commit/4c0faba32fddbd0745cbfaf1e1aeb3da5d35b9fc.

CNA Affected

[
  {
    "product": "WavPack",
    "vendor": "WavPack",
    "versions": [
      {
        "status": "affected",
        "version": "<=5.1 [fixed: After commit https://github.com/dbry/WavPack/commit/4c0faba32fddbd0745cbfaf1e1aeb3da5d35b9fc]"
      }
    ]
  }
]