CVE-2018-10538

An issue was discovered in WavPack 5.1.0 and earlier for WAV input

published April 29, 2018

CVSS
—
EPSS
2%
Percentile
77.3
In the wild
Unconfirmed
What it is

An issue was discovered in WavPack 5.1.0 and earlier for WAV input. Out-of-bounds writes can occur because ParseRiffHeaderConfig in riff.c does not validate the sizes of unknown chunks before attempting memory allocation, related to a lack of integer-overflow protection within a bytes_to_copy calculation and subsequent malloc call, leading to insufficient memory allocation.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01723 · 77.3th percentile
Published
2018-04-29T15:00Z
EPSS history
Timeline
  • 29 APR 15:00Z
    An issue was discovered in WavPack 5.1.0 and earlier for WAV input
    cvelistv5