CVEDB API

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2018-10539

An issue was discovered in WavPack 5.1.0 and earlier for DSDiff input. Out-of-bounds writes can occur because ParseDsdiffHeaderConfig in dsdiff.c does not validate the sizes of unknown chunks before attempting memory allocation, related to a lack of integer-overflow protection within a bytes_to_copy calculation and subsequent malloc call, leading to insufficient memory allocation.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.006

EPSS Ranking 69.0%

CVSS Severity

CVSS v3 Score 5.5

CVSS v2 Score 4.3

References

Products affected by CVE-2018-10539

Wavpack » Wavpack » Version: 4.40.0

cpe:2.3:a:wavpack:wavpack:4.40.0
Wavpack » Wavpack » Version: 4.41.0

cpe:2.3:a:wavpack:wavpack:4.41.0
Wavpack » Wavpack » Version: 4.42.0

cpe:2.3:a:wavpack:wavpack:4.42.0
Wavpack » Wavpack » Version: 4.50.0

cpe:2.3:a:wavpack:wavpack:4.50.0
Wavpack » Wavpack » Version: 4.50.1

cpe:2.3:a:wavpack:wavpack:4.50.1
Wavpack » Wavpack » Version: 4.60.0

cpe:2.3:a:wavpack:wavpack:4.60.0
Wavpack » Wavpack » Version: 4.60.1

cpe:2.3:a:wavpack:wavpack:4.60.1
Wavpack » Wavpack » Version: 4.70.0

cpe:2.3:a:wavpack:wavpack:4.70.0
Wavpack » Wavpack » Version: 4.75.0

cpe:2.3:a:wavpack:wavpack:4.75.0
Wavpack » Wavpack » Version: 4.75.2

cpe:2.3:a:wavpack:wavpack:4.75.2
Wavpack » Wavpack » Version: 4.80.0

cpe:2.3:a:wavpack:wavpack:4.80.0
Wavpack » Wavpack » Version: 5.0.0

cpe:2.3:a:wavpack:wavpack:5.0.0
Wavpack » Wavpack » Version: 5.1.0

cpe:2.3:a:wavpack:wavpack:5.1.0
Debian » Debian Linux » Version: 8.0

cpe:2.3:o:debian:debian_linux:8.0
Debian » Debian Linux » Version: 9.0

cpe:2.3:o:debian:debian_linux:9.0

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2018-10539

Products

Pricing

Contact Us