https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-09T11:52:01.089252+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bdu:2023-03843 bdu:2023-03843 2026-10-09T11:52:01.268759+00:00 bdu:2023-03843 https://cve.radiocsirt.org/vuln/euvd-2026-12366 EUVD-2026-12366 2026-10-09T11:52:01.268800+00:00 EUVD-2026-12366 https://cve.radiocsirt.org/vuln/fkie_cve-2022-2476 fkie_cve-2022-2476 2026-10-09T11:52:01.268814+00:00

A null pointer dereference bug was found in wavpack-5.4.0 The results from the ASAN log: AddressSanitizer:DEADLYSIGNAL ===================================================================84257==ERROR: AddressSanitizer: SEGV on unknown address 0x000000000000 (pc 0x561b47a970c6 bp 0x7fff13952fb0 sp 0x7fff1394fca0 T0) ==84257==The signal is caused by a WRITE memory access. ==84257==Hint: address points to the zero page. #0 0x561b47a970c5 in main cli/wvunpack.c:834 #1 0x7efc4f5c0082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) #2 0x561b47a945ed in _start (/usr/local/bin/wvunpack+0xa5ed) AddressSanitizer can not provide additional info. SUMMARY: AddressSanitizer: SEGV cli/wvunpack.c:834 in main ==84257==ABORTING

 https://cve.radiocsirt.org/vuln/ghsa-62q3-hj99-8qw6 GHSA-62q3-hj99-8qw6 2026-10-09T11:52:01.268849+00:00

A null pointer dereference bug was found in wavpack-5.4.0 The results from the ASAN log: AddressSanitizer:DEADLYSIGNAL ===================================================================84257==ERROR: AddressSanitizer: SEGV on unknown address 0x000000000000 (pc 0x561b47a970c6 bp 0x7fff13952fb0 sp 0x7fff1394fca0 T0) ==84257==The signal is caused by a WRITE memory access. ==84257==Hint: address points to the zero page. #0 0x561b47a970c5 in main cli/wvunpack.c:834 #1 0x7efc4f5c0082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) #2 0x561b47a945ed in _start (/usr/local/bin/wvunpack+0xa5ed) AddressSanitizer can not provide additional info. SUMMARY: AddressSanitizer: SEGV cli/wvunpack.c:834 in main ==84257==ABORTING

 https://cve.radiocsirt.org/vuln/gsd-2022-2476 gsd-2022-2476 2026-10-09T11:52:01.268868+00:00 gsd-2022-2476 https://cve.radiocsirt.org/vuln/msrc_cve-2022-2476 msrc_CVE-2022-2476 — A null pointer dereference bug was found in wavpack-5.4.0 The results from the ASAN log: AddressSanitizer:DEADLYSIGNAL… 2026-10-09T11:52:01.268880+00:00 msrc_CVE-2022-2476 https://cve.radiocsirt.org/vuln/oesa-2024-2514 OESA-2024-2514 — wavpack security update 2026-10-09T11:52:01.268900+00:00

Affected: openEuler:20.03-LTS-SP4: wavpack

WavPack is a completely open audio compression format providing lossless, high-quality lossy, and a unique hybrid compression mode. For version 5.0.0, several new file formats and lossless DSD audio compression were added, making WavPack a universal audio archiving solution. Security Fix(es): A null pointer dereference bug was found in wavpack-5.4.0 The results from the ASAN log: AddressSanitizer:DEADLYSIGNAL ===================================================================84257==ERROR: AddressSanitizer: SEGV on unknown address 0x000000000000 (pc 0x561b47a970c6 bp 0x7fff13952fb0 sp 0x7fff1394fca0 T0) ==84257==The signal is caused by a WRITE memory access. ==84257==Hint: address points to the zero page. #0 0x561b47a970c5 in main cli/wvunpack.c:834 #1 0x7efc4f5c0082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) #2 0x561b47a945ed in _start (/usr/local/bin/wvunpack+0xa5ed) AddressSanitizer can not provide additional info. SUMMARY: AddressSanitizer: SEGV cli/wvunpack.c:834 in main ==84257==ABORTING(CVE-2022-2476)

 https://cve.radiocsirt.org/vuln/suse-su-2022:2682-1 SUSE-SU-2022:2682-1 — Security update for wavpack 2026-10-09T11:52:01.268930+00:00

Security update for wavpack

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2022-2476 UBUNTU-CVE-2022-2476 2026-10-09T11:52:01.268946+00:00

Affected: Ubuntu:Pro:16.04:LTS: wavpack, Ubuntu:18.04:LTS: wavpack, Ubuntu:20.04:LTS: wavpack, Ubuntu:22.04:LTS: wavpack, Ubuntu:24.04:LTS: wavpack, Ubuntu:25.10: wavpack, Ubuntu:26.04:LTS: wavpack

A null pointer dereference bug was found in wavpack-5.4.0 The results from the ASAN log: AddressSanitizer:DEADLYSIGNAL ===================================================================84257==ERROR: AddressSanitizer: SEGV on unknown address 0x000000000000 (pc 0x561b47a970c6 bp 0x7fff13952fb0 sp 0x7fff1394fca0 T0) ==84257==The signal is caused by a WRITE memory access. ==84257==Hint: address points to the zero page. #0 0x561b47a970c5 in main cli/wvunpack.c:834 #1 0x7efc4f5c0082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) #2 0x561b47a945ed in _start (/usr/local/bin/wvunpack+0xa5ed) AddressSanitizer can not provide additional info. SUMMARY: AddressSanitizer: SEGV cli/wvunpack.c:834 in main ==84257==ABORTING