PT-2018-9950

CVE-2018-10536

Publicado

2018-04-29

Atualizado

2026-10-31

Descrição por

CVSS 3.1

7.8

Alta

MétricasAV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions: WavPack versions 5.1.0 and earlier

Description: A issue in the WAV parser component allows writing to memory due to the ParseRiffHeaderConfig function in riff.c not rejecting multiple format chunks.

Recommendations: For versions 5.1.0 and earlier, at the moment, there is no information about a newer version that contains a fix for this vulnerability.

Impactos

Pesquisadores

Alexandru Razvan Caciulescu

Andrew Santosa

Marcel Böhme

Thuan Pham

Fornecedores

Produtos afetados

Enumeração de fraquezas

CWE-787: Out-of-bounds Write

Identificadores relacionados

CVE-2018-10536