CVEDB API

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2018-10536

An issue was discovered in WavPack 5.1.0 and earlier. The WAV parser component contains a vulnerability that allows writing to memory because ParseRiffHeaderConfig in riff.c does not reject multiple format chunks.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.01

EPSS Ranking 75.5%

CVSS Severity

CVSS v3 Score 7.8

CVSS v2 Score 6.8

References

Products affected by CVE-2018-10536

Wavpack » Wavpack » Version: 4.40.0

cpe:2.3:a:wavpack:wavpack:4.40.0
Wavpack » Wavpack » Version: 4.41.0

cpe:2.3:a:wavpack:wavpack:4.41.0
Wavpack » Wavpack » Version: 4.42.0

cpe:2.3:a:wavpack:wavpack:4.42.0
Wavpack » Wavpack » Version: 4.50.0

cpe:2.3:a:wavpack:wavpack:4.50.0
Wavpack » Wavpack » Version: 4.50.1

cpe:2.3:a:wavpack:wavpack:4.50.1
Wavpack » Wavpack » Version: 4.60.0

cpe:2.3:a:wavpack:wavpack:4.60.0
Wavpack » Wavpack » Version: 4.60.1

cpe:2.3:a:wavpack:wavpack:4.60.1
Wavpack » Wavpack » Version: 4.70.0

cpe:2.3:a:wavpack:wavpack:4.70.0
Wavpack » Wavpack » Version: 4.75.0

cpe:2.3:a:wavpack:wavpack:4.75.0
Wavpack » Wavpack » Version: 4.75.2

cpe:2.3:a:wavpack:wavpack:4.75.2
Wavpack » Wavpack » Version: 4.80.0

cpe:2.3:a:wavpack:wavpack:4.80.0
Wavpack » Wavpack » Version: 5.0.0

cpe:2.3:a:wavpack:wavpack:5.0.0
Wavpack » Wavpack » Version: 5.1.0

cpe:2.3:a:wavpack:wavpack:5.1.0
Debian » Debian Linux » Version: 8.0

cpe:2.3:o:debian:debian_linux:8.0
Debian » Debian Linux » Version: 9.0

cpe:2.3:o:debian:debian_linux:9.0

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2018-10536

Products

Pricing

Contact Us