Medium severity5.5NVD Advisory· Published Jul 11, 2019· Updated Jun 17, 2026
CVE-2019-1010319
CVE-2019-1010319
Description
WavPack 5.1.0 and earlier is affected by: CWE-457: Use of Uninitialized Variable. The impact is: Unexpected control flow, crashes, and segfaults. The component is: ParseWave64HeaderConfig (wave64.c:211). The attack vector is: Maliciously crafted .wav file. The fixed version is: After commit https://github.com/dbry/WavPack/commit/33a0025d1d63ccd05d9dbaa6923d52b1446a62fe.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
27- osv-coords25 versionspkg:rpm/almalinux/wavpackpkg:rpm/almalinux/wavpack-develpkg:rpm/opensuse/wavpack&distro=openSUSE%20Leap%2015.0pkg:rpm/opensuse/wavpack&distro=openSUSE%20Leap%2015.1pkg:rpm/opensuse/wavpack&distro=openSUSE%20Leap%2015.2pkg:rpm/opensuse/wavpack&distro=openSUSE%20Tumbleweedpkg:rpm/suse/wavpack&distro=SUSE%20Enterprise%20Storage%206pkg:rpm/suse/wavpack&distro=SUSE%20Linux%20Enterprise%20High%20Performance%20Computing%2015%20SP1-ESPOSpkg:rpm/suse/wavpack&distro=SUSE%20Linux%20Enterprise%20High%20Performance%20Computing%2015%20SP1-LTSSpkg:rpm/suse/wavpack&distro=SUSE%20Linux%20Enterprise%20High%20Performance%20Computing%2015-ESPOSpkg:rpm/suse/wavpack&distro=SUSE%20Linux%20Enterprise%20High%20Performance%20Computing%2015-LTSSpkg:rpm/suse/wavpack&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Basesystem%2015pkg:rpm/suse/wavpack&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Basesystem%2015%20SP1pkg:rpm/suse/wavpack&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Basesystem%2015%20SP2pkg:rpm/suse/wavpack&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Desktop%20Applications%2015pkg:rpm/suse/wavpack&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Desktop%20Applications%2015%20SP1pkg:rpm/suse/wavpack&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Desktop%20Applications%2015%20SP2pkg:rpm/suse/wavpack&distro=SUSE%20Linux%20Enterprise%20Server%2015%20SP1-BCLpkg:rpm/suse/wavpack&distro=SUSE%20Linux%20Enterprise%20Server%2015%20SP1-LTSSpkg:rpm/suse/wavpack&distro=SUSE%20Linux%20Enterprise%20Server%2015-LTSSpkg:rpm/suse/wavpack&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2015pkg:rpm/suse/wavpack&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2015%20SP1pkg:rpm/suse/wavpack&distro=SUSE%20Manager%20Proxy%204.0pkg:rpm/suse/wavpack&distro=SUSE%20Manager%20Retail%20Branch%20Server%204.0pkg:rpm/suse/wavpack&distro=SUSE%20Manager%20Server%204.0
< 5.1.0-15.el8+ 24 more
- (no CPE)range: < 5.1.0-15.el8
- (no CPE)range: < 5.1.0-15.el8
- (no CPE)range: < 5.1.0-lp151.5.3.1
- (no CPE)range: < 5.1.0-lp151.5.3.1
- (no CPE)range: < 5.4.0-lp152.7.3.1
- (no CPE)range: < 5.4.0-1.6
- (no CPE)range: < 5.4.0-4.9.1
- (no CPE)range: < 5.4.0-4.9.1
- (no CPE)range: < 5.4.0-4.9.1
- (no CPE)range: < 5.4.0-4.9.1
- (no CPE)range: < 5.4.0-4.9.1
- (no CPE)range: < 5.1.0-4.6.1
- (no CPE)range: < 5.1.0-4.6.1
- (no CPE)range: < 5.4.0-4.9.1
- (no CPE)range: < 5.1.0-4.6.1
- (no CPE)range: < 5.1.0-4.6.1
- (no CPE)range: < 5.4.0-4.9.1
- (no CPE)range: < 5.4.0-4.9.1
- (no CPE)range: < 5.4.0-4.9.1
- (no CPE)range: < 5.4.0-4.9.1
- (no CPE)range: < 5.4.0-4.9.1
- (no CPE)range: < 5.4.0-4.9.1
- (no CPE)range: < 5.4.0-4.9.1
- (no CPE)range: < 5.4.0-4.9.1
- (no CPE)range: < 5.4.0-4.9.1
Patches
Vulnerability mechanics
References
8- github.com/dbry/WavPack/commit/33a0025d1d63ccd05d9dbaa6923d52b1446a62fenvdPatchThird Party Advisory
- github.com/dbry/WavPack/issues/68nvdExploitIssue TrackingThird Party Advisory
- lists.debian.org/debian-lts-announce/2021/01/msg00013.htmlnvdMailing ListThird Party Advisory
- usn.ubuntu.com/4062-1/nvdThird Party Advisory
- lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6CFFFWIWALGQPKINRDW3PRGRD5LOLGZA/nvd
- lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/BRWQNE3TH5UF64IKHKKHVCHJHUOVKJUH/nvd
- lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/IX3J2JML5A7KC2BLGBEFTIIZR3EM7LVJ/nvd
- lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/PYESOAZ6Z6IG4BQBURL6OUY6P4YB6SKS/nvd
News mentions
0No linked articles in our index yet.