CVE-2018-19840

概要

参考情報

• lists.opensuse.org/opensuse-security-announce/2019-04/msg00029.html · Third Party Advisory
• packetstormsecurity.com/files/155743/Slackware-Security-Advisory-wavpack-Updates.html
• dbry/WavPack commit 070ef6f · Patch
• dbry/WavPack · Third Party Advisory
• lists.debian.org/debian-lts-announce/2021/01/msg00013.html
• lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/3BLSOEVEKF4VNNVNZ2AN46BJUT4TGVWT
• lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6CFFFWIWALGQPKINRDW3PRGRD5LOLGZA
• lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/BRWQNE3TH5UF64IKHKKHVCHJHUOVKJUH
• lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/NZGXJUHCGQI6XKLCBUZHXPYIIWMFWA22

wavpack のその他の脆弱性

• CVE-2022-2476中 5.5A null pointer dereference bug was found in wavpack-5.4.0 The results from the ASAN log: AddressSanitizer:DEADLYSIGNAL =====================…
• CVE-2021-44269中 5.5An out of bounds read was found in Wavpack 5.4.0 in processing *.WAV files. This issue triggered in function WavpackPackSamples of file src/…
• CVE-2020-35738中 6.1WavPack 5.3.0 has an out-of-bounds write in WavpackPackSamples in pack_utils.c because of an integer overflow in a malloc argument. NOTE: so…
• CVE-2019-1010319中 5.5WavPack 5.1.0 and earlier is affected by: CWE-457: Use of Uninitialized Variable. The impact is: Unexpected control flow, crashes, and segfa…
• CVE-2019-1010317中 5.5WavPack 5.1.0 and earlier is affected by: CWE-457: Use of Uninitialized Variable. The impact is: Unexpected control flow, crashes, and segfa…