CVE-2018-19841

Name of the Vulnerable Software and Affected Versions WavPack versions through 5.1.0

Description The issue is related to the WavpackVerifySingleBlock function in the open utils.c component of the WavPack audio codec, which is associated with an out-of-bounds read of data buffer. This can be exploited by a remote attacker using a specially crafted WavPack lossless audio file, leading to a denial-of-service (application crash).

Recommendations For versions through 5.1.0, consider updating to a version that contains a fix for this issue, as using a specially crafted WavPack file can cause an application crash. At the moment, there is no information about a newer version that contains a fix for this vulnerability.