CVE-2018-10536

概要

参考情報

• packetstormsecurity.com/files/155743/Slackware-Security-Advisory-wavpack-Updates.html
• dbry/WavPack commit 26cb47f · Patch
• dbry/WavPack · Issue Tracking
• dbry/WavPack · Issue Tracking
• dbry/WavPack · Issue Tracking
• lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6CFFFWIWALGQPKINRDW3PRGRD5LOLGZA
• lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/BRWQNE3TH5UF64IKHKKHVCHJHUOVKJUH
• seclists.org/bugtraq/2019/Dec/37
• usn.ubuntu.com/3637-1 · Third Party Advisory
• debian.org/security/2018/dsa-4197 · Third Party Advisory

wavpack のその他の脆弱性

• CVE-2022-2476中 5.5A null pointer dereference bug was found in wavpack-5.4.0 The results from the ASAN log: AddressSanitizer:DEADLYSIGNAL =====================…
• CVE-2021-44269中 5.5An out of bounds read was found in Wavpack 5.4.0 in processing *.WAV files. This issue triggered in function WavpackPackSamples of file src/…
• CVE-2020-35738中 6.1WavPack 5.3.0 has an out-of-bounds write in WavpackPackSamples in pack_utils.c because of an integer overflow in a malloc argument. NOTE: so…
• CVE-2019-1010319中 5.5WavPack 5.1.0 and earlier is affected by: CWE-457: Use of Uninitialized Variable. The impact is: Unexpected control flow, crashes, and segfa…
• CVE-2019-1010317中 5.5WavPack 5.1.0 and earlier is affected by: CWE-457: Use of Uninitialized Variable. The impact is: Unexpected control flow, crashes, and segfa…