Medium severity5.5NVD Advisory· Published Jul 11, 2019· Updated Jun 17, 2026
CVE-2019-1010317
CVE-2019-1010317
Description
WavPack 5.1.0 and earlier is affected by: CWE-457: Use of Uninitialized Variable. The impact is: Unexpected control flow, crashes, and segfaults. The component is: ParseCaffHeaderConfig (caff.c:486). The attack vector is: Maliciously crafted .wav file. The fixed version is: After commit https://github.com/dbry/WavPack/commit/f68a9555b548306c5b1ee45199ccdc4a16a6101b.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
5- osv-coords3 versionspkg:rpm/almalinux/wavpackpkg:rpm/almalinux/wavpack-develpkg:rpm/opensuse/wavpack&distro=openSUSE%20Tumbleweed
< 5.1.0-15.el8+ 2 more
- (no CPE)range: < 5.1.0-15.el8
- (no CPE)range: < 5.1.0-15.el8
- (no CPE)range: < 5.4.0-1.6
Patches
Vulnerability mechanics
References
8- github.com/dbry/WavPack/commit/f68a9555b548306c5b1ee45199ccdc4a16a6101bnvdPatchThird Party Advisory
- github.com/dbry/WavPack/issues/66nvdExploitIssue TrackingThird Party Advisory
- lists.debian.org/debian-lts-announce/2021/01/msg00013.htmlnvdMailing ListThird Party Advisory
- usn.ubuntu.com/4062-1/nvdThird Party Advisory
- lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6CFFFWIWALGQPKINRDW3PRGRD5LOLGZA/nvd
- lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/BRWQNE3TH5UF64IKHKKHVCHJHUOVKJUH/nvd
- lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/IX3J2JML5A7KC2BLGBEFTIIZR3EM7LVJ/nvd
- lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/PYESOAZ6Z6IG4BQBURL6OUY6P4YB6SKS/nvd
News mentions
0No linked articles in our index yet.