An issue was discovered in WavPack 5.1.0 and earlier
published April 29, 2018
CVSS
—
EPSS
2%
Percentile
80.2
In the wild
Unconfirmed
What it is
An issue was discovered in WavPack 5.1.0 and earlier. The WAV parser component contains a vulnerability that allows writing to memory because ParseRiffHeaderConfig in riff.c does not reject multiple format chunks.
The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01965 · 80.2th percentile
Published
2018-04-29T15:00Z
EPSS history
Timeline
29 APR 15:00Z
An issue was discovered in WavPack 5.1.0 and earlier