CVE-2022-28488

The CVE-2022-28488 entry concerns the libwav project: the function wav_format_write in libwav.c (libwav up to 2017-04-20) contains a use of uninitialized variable vulnerability. Public references (NVD, Red Hat, CVE List, CVELIST, CNNVD) confirm this vulnerability description. The connected docume...

CVE-2018-14051

CVE-2018-14051 affects the libwav library; the wav_read function in libwav.c (libwav through 2017-04-20) contains an infinite loop. Multiple sources corroborate this, including CNVD which notes that an attacker can exploit it to cause an infinite loop. The public details do not provide remediatio...

CVE-2019-16348

CVE-2019-16348 affects marc-q’s libwav up to 2017-04-20, where a NULL pointer dereference occurs in the function referenced as gain_file() in wav_gain.c. The issue is documented as a NULL pointer dereference without publicly disclosed details on exploitation vectors within the provided sources. S...

CVE-2018-14050

The set of connected documents confirms CVE-2018-14050 affects the libwav C library, specifically a segmentation fault in the wav_free function in libwav.c up to 2017-04-20. The vulnerability is described consistently as a SEGV in wav_free, with multiple feeds (Red Hat, CNVD, NVD, CVE listings) r...

CVE-2018-14549

CVE-2018-14549 (libwav) Affects: libwav up to at least 2017-04-20. Consequence: a segmentation fault in the function wav_write (libwav.c) that can trigger a crash. Details: The issue is explicitly described as a SEGV in wav_write within libwav.c. No additional exploitation details or affected ver...

CVE-2018-14049

Summary: CVE-2018-14049 affects the libwav WAV encoding library (C) up to 2017-04-20. The issue is a segmentation fault in the function print_info located at wav_info/wav_info.c, which can trigger a crash (denial of service). The connected Red Hat/CNVD entries corroborate a SEGV in libwav’s print...

CVE-2019-19698

CVE-2019-19698 affects the libwav library (marc-q libwav) up to version 2017-04-20. The root cause is a NULL pointer dereference in wav_content_read() located in libwav.c, which can lead to a denial of service. Multiple sources (NVD, Red Hat, CVE databases, CNVD, PRION, CVELIST) corroborate the s...

CVE-2018-14052

The CVE-2018-14052 entry affects the libwav library (wav_gain/wav_gain.c) and is a segmentation fault in apply_gain. The issue is described across multiple sources as a SEGV in the gain application function, with affected history up to 2017-04-20. Impact is described as a crash/denial of service ...