CVE-2018-10537 - CVE House
Back to Database
Status published High CVE-2018-10537

An issue was discovered in WavPack 5.1.0 and earlier. The...

Vulnerability Description

An issue was discovered in WavPack 5.1.0 and earlier. The W64 parser component contains a vulnerability that allows writing to memory because ParseWave64HeaderConfig in wave64.c does not reject multiple format chunks.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2018-10537

Credits & Attribution

No credits recorded in the NVD database.

References

More from wavpack

View All →
CVE-2021-44269
An out of bounds read was found in Wavpack 5.4.0...
Medium 5.5
CVE-2020-35738
WavPack 5.3.0 has an out-of-bounds write in WavpackPackSamples in pack_utils.c...
Medium 6.1
CVE-2019-11498
WavpackSetConfiguration64 in pack_utils.c in libwavpack.a in WavPack through 5.1.0 has...
Medium 6.5
CVE-2018-7254
The ParseCaffHeaderConfig function of the cli/caff.c file of WavPack 5.1.0...
High 7.8
CVE-2018-7253
The ParseDsdiffHeaderConfig function of the cli/dsdiff.c file of WavPack 5.1.0...
High 7.8

Affected Vendor

Affected Software

wavpack, debian linux
Vulnerable Versions:
0, 8.0, 9.0

Timeline

Official Publish: April 29th, 2018
Last Modified: August 5th, 2024
Added to House: July 20th, 2026

CVSS Vectors

V3: CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Weaknesses (CWE)

No CWE data available

MITRE ATT&CK TTPs

No associated TTPs found for this vulnerability.