WavPack 缓冲区错误漏洞

WavPack is a free, open source lossless audio compression format with a .wv file extension. An out-of-bounds write vulnerability exists in WavpackPackSamples in packutils.c in WavPack 5.3.0, which stems from an integer overflow in the malloc parameter and can be exploited by an attacker to cause ...

PT-2020-5481 · Wavpack +5 · Wavpack +5

Name of the Vulnerable Software and Affected Versions: WavPack versions 5.3.0 through 5.3.2 Description: The issue is related to an out-of-bounds write in the WavpackPackSamples function in the pack utils.c file due to an integer overflow in a malloc argument. This can allow a remote attacker to...

SUSE SLES12 Security Update : wavpack (SUSE-SU-2020:2727-1)

This update for wavpack fixes the following issues : Security issues fixed : CVE-2018-19840: Fixed a denial-of-service in the WavpackPackInit function from packutils.c bsc1120930 Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security...

Denial Of Service (DoS)

wavpack is vulnerable to denial of service DoS. The vulnerability exists in the WriteCaffHeader function in cli/caff.c, allowing a malicious user to crash the application via a crafted WV file...

Denial Of Service (DoS)

wavpack is vulnerable to denial of service. An out-of-bounds read in the readnewconfiginfo function in openutils.c allows a remote attacker to cause a denial of service via a malicious WV file...

Denial Of Service (DoS)

Wavpack is vulnerability to denial of service. This vulnerability allows remote attackers to cause a denial of service out-of-bounds read via a crafted WV file...

Denial Of Service (DoS)

wavpack is vulnerable to denial of service. The readcode function in readwords.c allows remote attackers to cause a denial of service out-of-bounds read via a malicious WV file...

RHEL 8 : wavpack (RHSA-2020:1581)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2020:1581 advisory. WavPack is a completely open audio compression format providing lossless, high-quality lossy, and a unique hybrid compression mode. Security...

SUSE-SU-2020:2727-1 Security update for wavpack

This update for wavpack fixes the following issues: Security issues fixed: - CVE-2018-19840: Fixed a denial-of-service in the WavpackPackInit function from packutils.c bsc1120930...

WavPack: Multiple vulnerabilities

Background WavPack is a set of hybrid lossless audio compression tools. Description Multiple vulnerabilities have been discovered in WavPack. Please review the CVE identifiers referenced below for details. Impact A remote attacker could send a specially crafted audio file possibly resulting in a...

GLSA-202007-19 : WavPack: Multiple vulnerabilities

The remote host is affected by the vulnerability described in GLSA-202007-19 WavPack: Multiple vulnerabilities Multiple vulnerabilities have been discovered in WavPack. Please review the CVE identifiers referenced below for details. Impact : A remote attacker could send a specially crafted audio...

OSV-2020-1006 Use-of-uninitialized-value in decimate_dsd_run

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=19928 Crash type: Use-of-uninitialized-value Crash state: decimatedsdrun WavpackUnpackSamples WavpackSeekSample64...

OSV-2020-48 UNKNOWN READ in decode_fast

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=20448 Crash type: UNKNOWN READ Crash state: decodefast unpackdsdsamples WavpackUnpackSamples...

ffmpeg:ffmpeg_AV_CODEC_ID_WAVPACK_fuzzer: Heap-buffer-overflow in wavpack_decode_block

Project: https://git.ffmpeg.org/ffmpeg.git Detailed Report: https://oss-fuzz.com/testcase?key=5678686190960640 Project: ffmpeg Fuzzing Engine: libFuzzer Fuzz Target: ffmpegAVCODECIDWAVPACKfuzzer Job Type: libfuzzerasanffmpeg Platform Id: linux Crash Type: Heap-buffer-overflow READ Crash Address:...

Arbitrary Code Execution

wavpack is vulnerable to arbitrary code execution. A buffer overflow in the ParseCaffHeaderConfig function in cli/caff.c allows a remote attacker to execute arbitrary code via a malicious CAF file...

Arbitrary Code Execution

wavpack is vulnerable to arbitrary code execution. A heap-based buffer over-read in the ParseDsdiffHeaderConfig function in cli/dsdiff.c allows a remote attacker to execute arbitrary code on the system or cause a denial-of-service via a malicious DSDIFF file...

Arbitrary Code Execution

wavpack is vulnerable to arbitrary code execution. The vulnerability exists as the W64 parser component contains a vulnerability that allows writing to memory because ParseWave64HeaderConfig in wave64.c does not reject multiple format chunks...

Arbitrary Code Execution

wavpack is vulnerable to arbitrary code execution. The vulnerability exists as the WAV parser component contains a vulnerability that allows writing to memory because ParseRiffHeaderConfig in riff.c does not reject multiple format chunks...

Denial Of Service (DoS)

wavpack is vulnerable to denial of service DoS. The vulnerability exists as an out-of-bounds write can occur because ParseRiffHeaderConfig in riff.c does not validate the sizes of unknown chunks before attempting memory allocation, related to a lack of integer-overflow protection within a...

Denial Of Service (DoS)

wavpack is vulnerable to denial of service DoS. The vulnerability exists as an issue was discovered in WavPack 5.1.0 and earlier for DSDiff input. Out-of-bounds writes can occur because ParseDsdiffHeaderConfig in dsdiff.c does not validate the sizes of unknown chunks before attempting memory...