Lucene search

K
redhatcveRedhat.comRH:CVE-2018-19840
HistoryApr 08, 2020 - 9:09 p.m.

CVE-2018-19840

2020-04-0821:09:40
redhat.com
access.redhat.com
11

EPSS

0.002

Percentile

56.6%

The function WavpackPackInit in pack_utils.c in libwavpack.a in WavPack through 5.1.0 allows attackers to cause a denial-of-service (resource exhaustion caused by an infinite loop) via a crafted wav audio file because WavpackSetConfiguration64 mishandles a sample rate of zero.