CVE-2019-1010319CWE-457

WavPack 5.1.0 and earlier is affected by: CWE-457: Use of Uninitialized Variable

published July 11, 2019

CVSS
—
EPSS
2%
Percentile
74.1
In the wild
Unconfirmed
What it is

WavPack 5.1.0 and earlier is affected by: CWE-457: Use of Uninitialized Variable. The impact is: Unexpected control flow, crashes, and segfaults. The component is: ParseWave64HeaderConfig (wave64.c:211). The attack vector is: Maliciously crafted .wav file. The fixed version is: After commit https://github.com/dbry/WavPack/commit/33a0025d1d63ccd05d9dbaa6923d52b1446a62fe.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01503 · 74.1th percentile
Weakness
CWE-457 · Use of Uninitialized Variable
Published
2019-07-11T19:23Z
EPSS history
Timeline
  • 11 JUL 19:23Z
    WavPack 5.1.0 and earlier is affected by: CWE-457: Use of Uninitialized Variable
    cvelistv5