CVE-2016-10169

WavPack (libwavpack) read_words.c: read_code in versions before 5.1.0 allows crafted WV files to trigger an out-of-bounds read, causing denial of service. Affected: WavPack up to 5.0.x; fixed in 5.1.0+. Evidence across multiple advisories/plugins confirms CVE-2016-10169. Mitigation: upgrade to Wa...

CVE-2016-10170

CVE-2016-10170 affects WavPack; the WriteCaffHeader function in cli/caff.c is vulnerable to an out-of-bounds read in crafted WV files, enabling a denial of service. Public records in connected advisories indicate fixes were delivered via openSUSE/SUSE security updates (wavpack updates addressing ...

CVE-2016-10171

CVE-2016-10171 affects WavPack (wavpack) and specifically the unreorder_channels function in cli/wvunpack.c. The vulnerability occurs in handling WV files prior to version 5.1.0, enabling a crafted file to trigger an out-of-bounds read and cause a denial of service. Public materials in the connec...

CVE-2016-10172

CVE-2016-10172 affects WavPack prior to 5.1.0: the read_new_config_info function in open_utils.c can cause a denial of service via an out-of-bounds read when processing crafted WV files. The issue is discussed alongside related CVEs (10169/10170/10171) in SUSE openSUSE updates and vendor advisori...