Vulnerability   
Search   
    Search 324607 CVE descriptions
and 145615 test descriptions,
access 10,000+ cross references.
Tests   CVE   All  

CVE ID:CVE-2019-11498
Description:WavpackSetConfiguration64 in pack_utils.c in libwavpack.a in WavPack through 5.1.0 has a "Conditional jump or move depends on uninitialised value" condition, which might allow attackers to cause a denial of service (application crash) via a DFF file that lacks valid sample- rate data.
Test IDs: 1.3.6.1.4.1.25623.1.0.853748   1.3.6.1.4.1.25623.1.0.876393   1.3.6.1.4.1.25623.1.0.853673   1.3.6.1.4.1.25623.1.1.12.2019.3960.1   1.3.6.1.4.1.25623.1.1.2.2019.2122   1.3.6.1.4.1.25623.1.1.4.2021.0186.1  
Cross References: Common Vulnerability Exposure (CVE) ID: CVE-2019-11498
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/NZDKXGA2ZNSSM64ZYDHOWCO4Q4VAKAON/
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/SCK2YJXY6V5CKGKSF2PPN7RL2DXVOC6G/
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/BRWQNE3TH5UF64IKHKKHVCHJHUOVKJUH/
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/6CFFFWIWALGQPKINRDW3PRGRD5LOLGZA/
https://security.gentoo.org/glsa/202007-19
https://github.com/dbry/WavPack/commit/bc6cba3f552c44565f7f1e66dc1580189addb2b4
https://github.com/dbry/WavPack/issues/67
https://lists.debian.org/debian-lts-announce/2021/01/msg00013.html
https://usn.ubuntu.com/3960-1/




© 1998-2025 E-Soft Inc. All rights reserved.