https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-09T04:11:15.044386+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/alsa-2020:1581 ALSA-2020:1581 — Low: wavpack security update 2026-10-09T04:11:15.051873+00:00

Affected: AlmaLinux:8: wavpack, AlmaLinux:8: wavpack-devel

WavPack is a completely open audio compression format providing lossless, high-quality lossy, and a unique hybrid compression mode.

Security Fix(es):

* wawpack: Infinite loop in WavpackPackInit function lead to DoS (CVE-2018-19840)

* wawpack: Out-of-bounds read in WavpackVerifySingleBlock function leads to DoS (CVE-2018-19841)

* wavpack: Use of uninitialized variable in WavpackSetConfiguration64 leads to DoS (CVE-2019-11498)

* wavpack: Divide by zero in ParseDsdiffHeaderConfig leads to crash (CVE-2019-1010315)

* wavpack: Use of uninitialized variable in ParseCaffHeaderConfig leads to DoS (CVE-2019-1010317)

* wavpack: Use of uninitialized variable in ParseWave64HeaderConfig leads to DoS (CVE-2019-1010319)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.

 https://cve.radiocsirt.org/vuln/bdu:2021-03439 bdu:2021-03439 2026-10-09T04:11:15.051947+00:00 bdu:2021-03439 https://cve.radiocsirt.org/vuln/cnvd-2019-38860 cnvd-2019-38860 2026-10-09T04:11:15.051964+00:00 cnvd-2019-38860 https://cve.radiocsirt.org/vuln/euvd-2026-60673 EUVD-2026-60673 2026-10-09T04:11:15.051976+00:00 EUVD-2026-60673 https://cve.radiocsirt.org/vuln/fkie_cve-2019-1010317 fkie_cve-2019-1010317 2026-10-09T04:11:15.051986+00:00

WavPack 5.1.0 and earlier is affected by: CWE-457: Use of Uninitialized Variable. The impact is: Unexpected control flow, crashes, and segfaults. The component is: ParseCaffHeaderConfig (caff.c:486). The attack vector is: Maliciously crafted .wav file. The fixed version is: After commit https://github.com/dbry/WavPack/commit/f68a9555b548306c5b1ee45199ccdc4a16a6101b.

 https://cve.radiocsirt.org/vuln/ghsa-7wf6-38w5-gjg5 GHSA-7wf6-38w5-gjg5 2026-10-09T04:11:15.052008+00:00

WavPack 5.1.0 and earlier is affected by: CWE-457: Use of Uninitialized Variable. The impact is: Unexpected control flow, crashes, and segfaults. The component is: ParseCaffHeaderConfig (caff.c:486). The attack vector is: Maliciously crafted .wav file. The fixed version is: After commit https://github.com/dbry/WavPack/commit/f68a9555b548306c5b1ee45199ccdc4a16a6101b.

 https://cve.radiocsirt.org/vuln/gsd-2019-1010317 gsd-2019-1010317 2026-10-09T04:11:15.052023+00:00 gsd-2019-1010317 https://cve.radiocsirt.org/vuln/opensuse-su-2024:11505-1 openSUSE-SU-2024:11505-1 — libwavpack1-32bit-5.4.0-1.6 on GA media 2026-10-09T04:11:15.052032+00:00

libwavpack1-32bit-5.4.0-1.6 on GA media

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2019-1010317 UBUNTU-CVE-2019-1010317 2026-10-09T04:11:15.052053+00:00

Affected: Ubuntu:18.04:LTS: wavpack

WavPack 5.1.0 and earlier is affected by: CWE-457: Use of Uninitialized Variable. The impact is: Unexpected control flow, crashes, and segfaults. The component is: ParseCaffHeaderConfig (caff.c:486). The attack vector is: Maliciously crafted .wav file. The fixed version is: After commit https://github.com/dbry/WavPack/commit/f68a9555b548306c5b1ee45199ccdc4a16a6101b.