Medium severity5.5NVD Advisory· Published Jul 11, 2019· Updated Jun 17, 2026
CVE-2019-1010317
CVE-2019-1010317
Description
WavPack 5.1.0 and earlier is affected by: CWE-457: Use of Uninitialized Variable. The impact is: Unexpected control flow, crashes, and segfaults. The component is: ParseCaffHeaderConfig (caff.c:486). The attack vector is: Maliciously crafted .wav file. The fixed version is: After commit https://github.com/dbry/WavPack/commit/f68a9555b548306c5b1ee45199ccdc4a16a6101b.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
12- osv-coords3 versionspkg:rpm/almalinux/wavpack-develpkg:rpm/opensuse/wavpack&distro=openSUSE%20Tumbleweedpkg:rpm/almalinux/wavpack
< 5.1.0-15.el8+ 2 more
- (no CPE)range: < 5.1.0-15.el8
- (no CPE)range: < 5.4.0-1.6
- (no CPE)range: < 5.1.0-15.el8
5.1.0 and earlier [fixed: After commit https://github.com/dbry/WavPack/commit/f68a9555b548306c5b1ee45199ccdc4a16a6101b]+ 2 more
- (no CPE)range: 5.1.0 and earlier [fixed: After commit https://github.com/dbry/WavPack/commit/f68a9555b548306c5b1ee45199ccdc4a16a6101b]
- cpe:2.3:a:wavpack:wavpack:*:*:*:*:*:*:*:*range: <=5.1.0
- (no CPE)range: <=5.1.0
cpe:2.3:o:fedoraproject:fedora:29:*:*:*:*:*:*:*+ 2 more
- cpe:2.3:o:fedoraproject:fedora:29:*:*:*:*:*:*:*
- cpe:2.3:o:fedoraproject:fedora:30:*:*:*:*:*:*:*
- cpe:2.3:o:fedoraproject:fedora:31:*:*:*:*:*:*:*
cpe:2.3:o:canonical:ubuntu_linux:18.04:*:*:*:lts:*:*:*+ 1 more
- cpe:2.3:o:canonical:ubuntu_linux:18.04:*:*:*:lts:*:*:*
- cpe:2.3:o:canonical:ubuntu_linux:19.04:*:*:*:*:*:*:*
Patches
Vulnerability mechanics
References
8- github.com/dbry/WavPack/commit/f68a9555b548306c5b1ee45199ccdc4a16a6101bnvdPatchThird Party Advisory
- github.com/dbry/WavPack/issues/66nvdExploitIssue TrackingThird Party Advisory
- lists.debian.org/debian-lts-announce/2021/01/msg00013.htmlnvdMailing ListThird Party Advisory
- usn.ubuntu.com/4062-1/nvdThird Party Advisory
- lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6CFFFWIWALGQPKINRDW3PRGRD5LOLGZA/nvd
- lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/BRWQNE3TH5UF64IKHKKHVCHJHUOVKJUH/nvd
- lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/IX3J2JML5A7KC2BLGBEFTIIZR3EM7LVJ/nvd
- lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/PYESOAZ6Z6IG4BQBURL6OUY6P4YB6SKS/nvd
News mentions
0No linked articles in our index yet.