CVE-2019-11498

WavpackSetConfiguration64 in pack_utils.c in libwavpack.a in WavPack through 5.1.0 has a "Conditional jump or move depends on uninitialised value" condition…

published April 24, 2019

CVSS
—
EPSS
3%
Percentile
87.0
In the wild
Unconfirmed
What it is

WavpackSetConfiguration64 in pack_utils.c in libwavpack.a in WavPack through 5.1.0 has a "Conditional jump or move depends on uninitialised value" condition, which might allow attackers to cause a denial of service (application crash) via a DFF file that lacks valid sample-rate data.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.02925 · 87.0th percentile
Published
2019-04-24T04:03Z
EPSS history
Timeline
  • 24 APR 04:03Z
    WavpackSetConfiguration64 in pack_utils.c in libwavpack.a in WavPack through 5.1.0 has a "Conditional jump or move depends on uninitialised value" condition…
    cvelistv5