WavPack 缓冲区错误漏洞

WavPack is a free, open source lossless audio compression format with a .wv file extension. An out-of-bounds write vulnerability exists in WavpackPackSamples in packutils.c in WavPack 5.3.0, which stems from an integer overflow in the malloc parameter and can be exploited by an attacker to cause ...

SUSE SLES12 Security Update : wavpack (SUSE-SU-2020:2727-1)

This update for wavpack fixes the following issues : Security issues fixed : CVE-2018-19840: Fixed a denial-of-service in the WavpackPackInit function from packutils.c bsc1120930 Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security...

Denial Of Service (DoS)

wavpack is vulnerable to denial of service DoS. The vulnerability exists in the WriteCaffHeader function in cli/caff.c, allowing a malicious user to crash the application via a crafted WV file...

Denial Of Service (DoS)

Wavpack is vulnerability to denial of service. This vulnerability allows remote attackers to cause a denial of service out-of-bounds read via a crafted WV file...

Denial Of Service (DoS)

wavpack is vulnerable to denial of service. An out-of-bounds read in the readnewconfiginfo function in openutils.c allows a remote attacker to cause a denial of service via a malicious WV file...

Denial Of Service (DoS)

wavpack is vulnerable to denial of service. The readcode function in readwords.c allows remote attackers to cause a denial of service out-of-bounds read via a malicious WV file...

RHEL 8 : wavpack (RHSA-2020:1581)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2020:1581 advisory. WavPack is a completely open audio compression format providing lossless, high-quality lossy, and a unique hybrid compression mode. Security...

SUSE-SU-2020:2727-1 Security update for wavpack

This update for wavpack fixes the following issues: Security issues fixed: - CVE-2018-19840: Fixed a denial-of-service in the WavpackPackInit function from packutils.c bsc1120930...

WavPack: Multiple vulnerabilities

Background WavPack is a set of hybrid lossless audio compression tools. Description Multiple vulnerabilities have been discovered in WavPack. Please review the CVE identifiers referenced below for details. Impact A remote attacker could send a specially crafted audio file possibly resulting in a...

GLSA-202007-19 : WavPack: Multiple vulnerabilities

The remote host is affected by the vulnerability described in GLSA-202007-19 WavPack: Multiple vulnerabilities Multiple vulnerabilities have been discovered in WavPack. Please review the CVE identifiers referenced below for details. Impact : A remote attacker could send a specially crafted audio...

OSV-2020-1006 Use-of-uninitialized-value in decimate_dsd_run

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=19928 Crash type: Use-of-uninitialized-value Crash state: decimatedsdrun WavpackUnpackSamples WavpackSeekSample64...

PT-2020-21786

Name of the Vulnerable Software and Affected Versions Wavpack affected versions not specified Description The issue is related to a crash caused by the use of an uninitialized value. The crash occurs in the decimate dsd run function, which is called by WavpackUnpackSamples. This suggests a proble...

PT-2020-21640

Name of the Vulnerable Software and Affected Versions Wavpack affected versions not specified Description The issue is related to a crash caused by the use of an uninitialized value. The crash occurs in the decimate dsd run function, which is called by WavpackUnpackSamples and WavpackSeekSample64...

PT-2020-22207

Name of the Vulnerable Software and Affected Versions Wavpack affected versions not specified Description The issue is related to a crash caused by the use of an uninitialized value. The crash occurs in the WavpackDeleteTagItem and WavpackAppendTagItem functions. Recommendations At the moment,...

OSV-2020-48 UNKNOWN READ in decode_fast

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=20448 Crash type: UNKNOWN READ Crash state: decodefast unpackdsdsamples WavpackUnpackSamples...

PT-2020-22345

Name of the Vulnerable Software and Affected Versions Wavpack affected versions not specified Description The issue is related to a crash type of UNKNOWN READ. Technical details about the crash include the functions decode fast, unpack dsd samples, and WavpackUnpackSamples. Recommendations At the...

ffmpeg:ffmpeg_AV_CODEC_ID_WAVPACK_fuzzer: Heap-buffer-overflow in wavpack_decode_block

Project: https://git.ffmpeg.org/ffmpeg.git Detailed Report: https://oss-fuzz.com/testcase?key=5678686190960640 Project: ffmpeg Fuzzing Engine: libFuzzer Fuzz Target: ffmpegAVCODECIDWAVPACKfuzzer Job Type: libfuzzerasanffmpeg Platform Id: linux Crash Type: Heap-buffer-overflow READ Crash Address:...

Arbitrary Code Execution

wavpack is vulnerable to arbitrary code execution. A buffer overflow in the ParseCaffHeaderConfig function in cli/caff.c allows a remote attacker to execute arbitrary code via a malicious CAF file...

Arbitrary Code Execution

wavpack is vulnerable to arbitrary code execution. A heap-based buffer over-read in the ParseDsdiffHeaderConfig function in cli/dsdiff.c allows a remote attacker to execute arbitrary code on the system or cause a denial-of-service via a malicious DSDIFF file...

Arbitrary Code Execution

wavpack is vulnerable to arbitrary code execution. The vulnerability exists as the W64 parser component contains a vulnerability that allows writing to memory because ParseWave64HeaderConfig in wave64.c does not reject multiple format chunks...