Security Advisories
CVEs affecting projects tracked on Release Alert, from NVD & OSV.
CVE-2018-10536
6.8
MEDIUMCVSS v2
Published
April 29, 2018
Affected
1 project
Assigned by
MITRE
Severity scale
010
Description
An issue was discovered in WavPack 5.1.0 and earlier. The WAV parser component contains a vulnerability that allows writing to memory because ParseRiffHeaderConfig in riff.c does not reject multiple format chunks.
dbry/WavPack
GitHubWavPack encode/decode library, command-line programs, and several plugins
GitHubWavPack encode/decode library, command-line programs, and several plugins<= 5.1.0NVD