Lucene search

K
cvelistDwfCVELIST:CVE-2019-1010319
HistoryJul 11, 2019 - 7:23 p.m.

CVE-2019-1010319

2019-07-1119:23:29
CWE-457
dwf
raw.githubusercontent.com
2

5.4 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

49.9%

WavPack 5.1.0 and earlier is affected by: CWE-457: Use of Uninitialized Variable. The impact is: Unexpected control flow, crashes, and segfaults. The component is: ParseWave64HeaderConfig (wave64.c:211). The attack vector is: Maliciously crafted .wav file. The fixed version is: After commit https://github.com/dbry/WavPack/commit/33a0025d1d63ccd05d9dbaa6923d52b1446a62fe.