CVE-2019-1010318
WavPack 5.1.0 and earlier is affected by: CWE-457: Use of Uninitialized Variable. The impact is:...
CVE-2019-1010318 has been rejected by its source and should not be treated as a live vulnerability, published July 11, 2019. Fixed in wavpack 5.1.0-2ubuntu1.4.
- Severity
- UnratedNo CVSS score yet
- Exploit chance
- UnscoredNo EPSS score yet
- Exploitation
- None knownNot on CISA’s or ENISA’s lists
- Fixed in
5.1.0-2ubuntu1.4wavpack +4 more
Description
DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2019-11498. Reason: This candidate is a reservation duplicate of CVE-2019-11498. Notes: All CVE users should reference CVE-2019-11498 instead of this candidate. All references and descriptions in this candidate have been removed to prevent accidental usage
Affected packages
| Package | Affected | Fixed |
|---|---|---|
wavpackMageia:6 From an advisory covering 5 CVEs | before 5.1.0-1.2.mga6 | 5.1.0-1.2.mga6 |
wavpackMageia:7 From an advisory covering 4 CVEs | before 5.1.0-4.1.mga7 | 5.1.0-4.1.mga7 |
wavpackUbuntu:18.04:LTS | before 5.1.0-2ubuntu1.4, plus listed versions 5.1.0-25.1.0-2ubuntu15.1.0-2ubuntu1.15.1.0-2ubuntu1.25.1.0-2ubuntu1.3 | 5.1.0-2ubuntu1.4 |
wavpackUbuntu:18.04:LTS From an advisory covering 4 CVEs | before 5.1.0-2ubuntu1.4, plus listed versions 5.1.0-25.1.0-2ubuntu15.1.0-2ubuntu1.15.1.0-2ubuntu1.25.1.0-2ubuntu1.3 | 5.1.0-2ubuntu1.4 |
wavpackopenSUSE:Tumbleweed From an advisory covering 11 CVEs | before 5.4.0-1.6 | 5.4.0-1.6 |
What each source reports
CVE ListNo score
DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2019-11498. Reason: This candidate is a reservation duplicate of CVE-2019-11498. Notes: All CVE users should reference CVE-2019-11498 instead of this candidate. All references and descriptions in this candidate have been removed to prevent accidental usage
- Record
CVE-2019-1010318- Updated
- 2026-11-02
EUVDEUVD-2019-2052No score
DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2019-11498. Reason: This candidate is a reservation duplicate of CVE-2019-11498. Notes: All CVE users should reference CVE-2019-11498 instead of this candidate. All references and descriptions in this candidate have been removed to prevent accidental usage
- Record
EUVD-2019-2052- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-fr6p-j5w9-5pc8No score
WavPack 5.1.0 and earlier is affected by: CWE-457: Use of Uninitialized Variable. The impact is:...
WavPack 5.1.0 and earlier is affected by: CWE-457: Use of Uninitialized Variable. The impact is: Unexpected control flow, crashes, and segfaults. The component is: WavpackSetConfiguration64 (pack_utils.c:198). The attack vector is: Maliciously crafted .wav file. The fixed version is: After commit https://github.com/dbry/WavPack/commit/bc6cba3f552c44565f7f1e66dc1580189addb2b4.
- Record
GHSA-fr6p-j5w9-5pc8- Updated
- 2026-11-02
NVDNo score
Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2019-11498. Reason: This candidate is a reservation duplicate of CVE-2019-11498. Notes: All CVE users should reference CVE-2019-11498 instead of this candidate. All references and descriptions in this candidate have been removed to prevent accidental usage
- Record
CVE-2019-1010318- Updated
- 2026-11-02
OSVMGASA-2019-0230No score
Updated wavpack packages fix security vulnerabilities
Updated wavpack packages fixes security vulnerabilities:
It was discovered that WavPack incorrectly handled certain DFF files. An attacker could possibly use this issue to cause a denial of service (CVE-2019-11498).
Rohan Padhye discovered that WavPack incorrectly handled certain WAV files. An attacker could possibly use this issue to cause a denial of service (CVE-2019-1010315, CVE-2019-1010317, CVE-2019-1010318, CVE-2019-1010319).
- Record
MGASA-2019-0230- Updated
- 2026-11-02
OSVMGASA-2019-0231No score
Updated wavpack packages fix security vulnerabilities
Updated wavpack packages fixes security vulnerabilities:
Rohan Padhye discovered that WavPack incorrectly handled certain WAV files. An attacker could possibly use this issue to cause a denial of service (CVE-2019-1010315, CVE-2019-1010317, CVE-2019-1010318, CVE-2019-1010319).
- Record
MGASA-2019-0231- Updated
- 2026-11-02
OSVopenSUSE-SU-2024:11505-1No score
libwavpack1-32bit-5.4.0-1.6 on GA media
These are all security issues fixed in the libwavpack1-32bit-5.4.0-1.6 package on the GA media of openSUSE Tumbleweed.
- Record
openSUSE-SU-2024:11505-1- Updated
- 2026-11-02
OSVUBUNTU-CVE-2019-1010318No score
Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2019-11498. Reason: This candidate is a reservation duplicate of CVE-2019-11498. Notes: All CVE users should reference CVE-2019-11498 instead of this candidate. All references and descriptions in this candidate have been removed to prevent accidental usage
- Record
UBUNTU-CVE-2019-1010318- Updated
- 2026-11-02
OSVUSN-4062-1No score
wavpack vulnerabilities
Rohan Padhye discovered that WavPack incorrectly handled certain WAV files. An attacker could possibly use this issue to cause a denial of service. (CVE-2019-1010315, CVE-2019-1010317, CVE-2019-1010318, CVE-2019-1010319)
- Record
USN-4062-1- Updated
- 2026-11-02
History
| Recorded | Changed | Sources |
|---|---|---|
| affected, facts | ||
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
References
nvd.nist.gov/vuln/detail/CVE-2019-1010318
github.com/dbry/WavPack/issues/67
advisories.mageia.org/MGASA-2019-0230.html
bugs.mageia.org/show_bug.cgi?id=25265
Show 20 moreShow less
usn.ubuntu.com/3960-1
ubuntu.com/security/CVE-2019-1010318
cve.org/CVERecord?id=CVE-2019-1010318
suse.com/security/cve/CVE-2018-19840