VYPR
← All advisories
Medium severity5.5NVD Advisory· Published Jul 11, 2019· Updated Jun 17, 2026

CVE-2019-1010315

CVE-2019-1010315

Description

WavPack 5.1 and earlier is affected by: CWE 369: Divide by Zero. The impact is: Divide by zero can lead to sudden crash of a software/service that tries to parse a .wav file. The component is: ParseDsdiffHeaderConfig (dsdiff.c:282). The attack vector is: Maliciously crafted .wav file. The fixed version is: After commit https://github.com/dbry/WavPack/commit/4c0faba32fddbd0745cbfaf1e1aeb3da5d35b9fc.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

11
  • Wavpack/Wavpackv53 versions
    <=5.1 [fixed: After commit https://github.com/dbry/WavPack/commit/4c0faba32fddbd0745cbfaf1e1aeb3da5d35b9fc]+ 2 more
    • (no CPE)range: <=5.1 [fixed: After commit https://github.com/dbry/WavPack/commit/4c0faba32fddbd0745cbfaf1e1aeb3da5d35b9fc]
    • cpe:2.3:a:wavpack:wavpack:*:*:*:*:*:*:*:*range: <=5.1.0
    • (no CPE)range: <=5.1
  • Fedoraproject/Fedora2 versions
    cpe:2.3:o:fedoraproject:fedora:30:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:o:fedoraproject:fedora:30:*:*:*:*:*:*:*
    • cpe:2.3:o:fedoraproject:fedora:31:*:*:*:*:*:*:*
  • Debian/linux
    cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*
  • Canonical/Ubuntu Linux2 versions
    cpe:2.3:o:canonical:ubuntu_linux:18.04:*:*:*:lts:*:*:*+ 1 more
    • cpe:2.3:o:canonical:ubuntu_linux:18.04:*:*:*:lts:*:*:*
    • cpe:2.3:o:canonical:ubuntu_linux:19.04:*:*:*:*:*:*:*
  • osv-coords3 versions
    pkg:rpm/almalinux/wavpack-develpkg:rpm/opensuse/wavpack&distro=openSUSE%20Tumbleweedpkg:rpm/almalinux/wavpack
    < 5.1.0-15.el8+ 2 more
    • (no CPE)range: < 5.1.0-15.el8
    • (no CPE)range: < 5.4.0-1.6
    • (no CPE)range: < 5.1.0-15.el8

Patches

Vulnerability mechanics

References

6

News mentions

0

No linked articles in our index yet.