CVE-2018-7254

The ParseCaffHeaderConfig function of the cli/caff.c file of WavPack 5.1.0 allows a remote attacker to cause a denial-of-service (global buffer over-read), or…

published February 19, 2018

CVSS
—
EPSS
10%
Percentile
95.5
In the wild
Unconfirmed
What it is

The ParseCaffHeaderConfig function of the cli/caff.c file of WavPack 5.1.0 allows a remote attacker to cause a denial-of-service (global buffer over-read), or possibly trigger a buffer overflow or incorrect memory allocation, via a maliciously crafted CAF file.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.09723 · 95.5th percentile
Published
2018-02-19T23:00Z
EPSS history
Timeline
  • 19 FEB 23:00Z
    The ParseCaffHeaderConfig function of the cli/caff.c file of WavPack 5.1.0 allows a remote attacker to cause a denial-of-service (global buffer over-read), or…
    cvelistv5