CVE-2018-10539

An issue was discovered in WavPack 5.1.0 and earlier for DSDiff input

published April 29, 2018

CVSS
—
EPSS
2%
Percentile
75.8
In the wild
Unconfirmed
What it is

An issue was discovered in WavPack 5.1.0 and earlier for DSDiff input. Out-of-bounds writes can occur because ParseDsdiffHeaderConfig in dsdiff.c does not validate the sizes of unknown chunks before attempting memory allocation, related to a lack of integer-overflow protection within a bytes_to_copy calculation and subsequent malloc call, leading to insufficient memory allocation.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01611 · 75.8th percentile
Published
2018-04-29T15:00Z
EPSS history
Timeline
  • 29 APR 15:00Z
    An issue was discovered in WavPack 5.1.0 and earlier for DSDiff input
    cvelistv5