PT-2018-9951

CVE-2018-10537

Publicado

2018-04-29

Atualizado

2026-10-31

Descrição por

CVSS 3.1

7.8

Alta

MétricasAV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions: WavPack versions 5.1.0 and earlier

Description: An issue in the W64 parser component allows writing to memory. This is due to the ParseWave64HeaderConfig function in wave64.c not rejecting multiple format chunks.

Recommendations: For versions 5.1.0 and earlier, at the moment, there is no information about a newer version that contains a fix for this vulnerability.

Impactos

Pesquisadores

Alexandru Razvan Caciulescu

Andrew Santosa

Marcel Böhme

Thuan Pham

Fornecedores

Produtos afetados

Enumeração de fraquezas

CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer

Identificadores relacionados

CVE-2018-10537