Linux Distros Unpatched Vulnerability : CVE-2018-10536

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An issue was discovered in WavPack 5.1.0 and earlier. The WAV parser component contains a vulnerability that allows writing to memory because...

Linux Distros Unpatched Vulnerability : CVE-2020-35738

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - WavPack 5.3.0 has an out-of-bounds write in WavpackPackSamples in packutils.c because of an integer overflow in a malloc argument. NOTE: some third-parties clai...

Linux Distros Unpatched Vulnerability : CVE-2018-10538

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An issue was discovered in WavPack 5.1.0 and earlier for WAV input. Out-of-bounds writes can occur because ParseRiffHeaderConfig in riff.c does not validate the...

PT-2025-7261 · Git +1 · Wavpack

Name of the Vulnerable Software and Affected Versions: No specific software or versions mentioned. Description: The issue is related to a crash type of Object-size. The crash state involves the functions unpack dsd samples and unpack samples worker thread. No information is available about the...

PT-2025-7256 · Wavpack · Wavpack

Name of the Vulnerable Software and Affected Versions: Wavpack affected versions not specified Description: The issue is related to a crash caused by a use-of-uninitialized-value error. The crash occurs in the decimate dsd run function, which is called by WavpackUnpackSamples. This suggests a...

Advisory ROSA-SA-2024-2540

software: wavpack 5.3.0 OS: ROSA-CHROME packageevrstring: wavpack-5.3.0-3 CVE-ID: CVE-2020-35738 BDU-ID: 2021-00777 CVE-Crit: HIGH CVE-DESC.: A vulnerability in the WavpackPackSamples function of the packutils.c component of the WavPack audio codec is related to an operation exceeding the allowed...

OESA-2024-2517 wavpack security update

WavPack is a completely open audio compression format providing lossless, high-quality lossy, and a unique hybrid compression mode. For version 5.0.0, several new file formats and lossless DSD audio compression were added, making WavPack a universal audio archiving solution. Security Fixes: A nul...

OESA-2024-2516 wavpack security update

WavPack is a completely open audio compression format providing lossless, high-quality lossy, and a unique hybrid compression mode. For version 5.0.0, several new file formats and lossless DSD audio compression were added, making WavPack a universal audio archiving solution. Security Fixes: A nul...

OESA-2024-2515 wavpack security update

WavPack is a completely open audio compression format providing lossless, high-quality lossy, and a unique hybrid compression mode. For version 5.0.0, several new file formats and lossless DSD audio compression were added, making WavPack a universal audio archiving solution. Security Fixes: A nul...

OESA-2024-2514 wavpack security update

WavPack is a completely open audio compression format providing lossless, high-quality lossy, and a unique hybrid compression mode. For version 5.0.0, several new file formats and lossless DSD audio compression were added, making WavPack a universal audio archiving solution. Security Fixes: A nul...

RHSA-2022:8139 Red Hat Security Advisory: wavpack security update

Bulletin has no description...

RHSA-2022:7558 Red Hat Security Advisory: wavpack security update

Bulletin has no description...

RHSA-2020:1581 Red Hat Security Advisory: wavpack security update

Bulletin has no description...

RHEL 9 : wavpack (Unpatched Vulnerability)

The remote Redhat Enterprise Linux 9 host has one or more packages installed that are affected by a vulnerability that has been acknowledged by the vendor but will not be patched. - wavpack: null pointer dereference in main in cli/wvunpack.c CVE-2022-2476 Note that Nessus has not tested for this...

RHEL 8 : mingw-wavpack (Unpatched Vulnerability)

The remote Redhat Enterprise Linux 8 host has one or more packages installed that are affected by multiple vulnerabilities that have been acknowledged by the vendor but will not be patched. - wavpack: Use of uninitialized variable in WavpackSetConfiguration64 leads to DoS CVE-2019-11498 - The...

RHEL 8 : wavpack (Unpatched Vulnerability)

The remote Redhat Enterprise Linux 8 host has one or more packages installed that are affected by multiple vulnerabilities that have been acknowledged by the vendor but will not be patched. - wavpack: out-of-bounds write in WavpackPackSamples function in packutils.c CVE-2020-35738 - The function...

RHEL 6 : wavpack (Unpatched Vulnerability)

The remote Redhat Enterprise Linux 6 host has one or more packages installed that are affected by multiple vulnerabilities that have been acknowledged by the vendor but will not be patched. - wavpack: out of bounds write in ParseRiffHeaderConfig in riff.c CVE-2018-10536 - The readcode function in...

RHEL 7 : wavpack (Unpatched Vulnerability)

The remote Redhat Enterprise Linux 7 host has one or more packages installed that are affected by multiple vulnerabilities that have been acknowledged by the vendor but will not be patched. - wavpack: out of bounds write in ParseRiffHeaderConfig in riff.c CVE-2018-10536 - The readcode function in...

RHEL 6 : wawpack (Unpatched Vulnerability)

The remote Redhat Enterprise Linux 6 host has one or more packages installed that are affected by a vulnerability that has been acknowledged by the vendor but will not be patched. - wawpack: Infinite loop in WavpackPackInit function lead to DoS CVE-2018-19840 Note that Nessus has not tested for...

RHEL 8 : wavpack (Unpatched Vulnerability)

The remote Redhat Enterprise Linux 8 host has one or more packages installed that are affected by multiple vulnerabilities that have been acknowledged by the vendor but will not be patched. - wavpack: Use of uninitialized variable in WavpackSetConfiguration64 leads to DoS CVE-2019-11498 - WavPack...