High severity7.8NVD Advisory· Published Feb 19, 2018· Updated Jun 17, 2026
CVE-2018-7254
CVE-2018-7254
Description
The ParseCaffHeaderConfig function of the cli/caff.c file of WavPack 5.1.0 allows a remote attacker to cause a denial-of-service (global buffer over-read), or possibly trigger a buffer overflow or incorrect memory allocation, via a maliciously crafted CAF file.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
19- osv-coords18 versionspkg:rpm/opensuse/wavpack&distro=openSUSE%20Leap%2015.1pkg:rpm/opensuse/wavpack&distro=openSUSE%20Leap%2015.2pkg:rpm/opensuse/wavpack&distro=openSUSE%20Tumbleweedpkg:rpm/suse/wavpack&distro=SUSE%20Enterprise%20Storage%206pkg:rpm/suse/wavpack&distro=SUSE%20Linux%20Enterprise%20High%20Performance%20Computing%2015%20SP1-ESPOSpkg:rpm/suse/wavpack&distro=SUSE%20Linux%20Enterprise%20High%20Performance%20Computing%2015%20SP1-LTSSpkg:rpm/suse/wavpack&distro=SUSE%20Linux%20Enterprise%20High%20Performance%20Computing%2015-ESPOSpkg:rpm/suse/wavpack&distro=SUSE%20Linux%20Enterprise%20High%20Performance%20Computing%2015-LTSSpkg:rpm/suse/wavpack&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Basesystem%2015%20SP2pkg:rpm/suse/wavpack&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Desktop%20Applications%2015%20SP2pkg:rpm/suse/wavpack&distro=SUSE%20Linux%20Enterprise%20Server%2015%20SP1-BCLpkg:rpm/suse/wavpack&distro=SUSE%20Linux%20Enterprise%20Server%2015%20SP1-LTSSpkg:rpm/suse/wavpack&distro=SUSE%20Linux%20Enterprise%20Server%2015-LTSSpkg:rpm/suse/wavpack&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2015pkg:rpm/suse/wavpack&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2015%20SP1pkg:rpm/suse/wavpack&distro=SUSE%20Manager%20Proxy%204.0pkg:rpm/suse/wavpack&distro=SUSE%20Manager%20Retail%20Branch%20Server%204.0pkg:rpm/suse/wavpack&distro=SUSE%20Manager%20Server%204.0
< 5.4.0-lp151.5.6.1+ 17 more
- (no CPE)range: < 5.4.0-lp151.5.6.1
- (no CPE)range: < 5.4.0-lp152.7.3.1
- (no CPE)range: < 5.4.0-1.6
- (no CPE)range: < 5.4.0-4.9.1
- (no CPE)range: < 5.4.0-4.9.1
- (no CPE)range: < 5.4.0-4.9.1
- (no CPE)range: < 5.4.0-4.9.1
- (no CPE)range: < 5.4.0-4.9.1
- (no CPE)range: < 5.4.0-4.9.1
- (no CPE)range: < 5.4.0-4.9.1
- (no CPE)range: < 5.4.0-4.9.1
- (no CPE)range: < 5.4.0-4.9.1
- (no CPE)range: < 5.4.0-4.9.1
- (no CPE)range: < 5.4.0-4.9.1
- (no CPE)range: < 5.4.0-4.9.1
- (no CPE)range: < 5.4.0-4.9.1
- (no CPE)range: < 5.4.0-4.9.1
- (no CPE)range: < 5.4.0-4.9.1
Patches
Vulnerability mechanics
References
8- github.com/dbry/WavPack/commit/8e3fe45a7bac31d9a3b558ae0079e2d92a04799envdPatchThird Party Advisory
- bugs.debian.org/cgi-bin/bugreport.cginvdIssue TrackingMailing ListThird Party Advisory
- github.com/dbry/WavPack/issues/26nvdIssue TrackingThird Party Advisory
- usn.ubuntu.com/3578-1/nvdThird Party Advisory
- www.debian.org/security/2018/dsa-4125nvdThird Party Advisory
- www.exploit-db.com/exploits/44154/nvdThird Party AdvisoryVDB Entry
- packetstormsecurity.com/files/155743/Slackware-Security-Advisory-wavpack-Updates.htmlnvd
- seclists.org/bugtraq/2019/Dec/37nvd
News mentions
0No linked articles in our index yet.