MidnightBSD

Advisories for libwav_project

CVE-2018-14049 MEDIUM

An issue has been found in libwav through 2017-04-20. It is a SEGV in the function print_info in wav_info/wav_info.c.

CVSS 2.0

Severity: MEDIUM

Problem Type: NVD-CWE-noinfo,

Products Affected

Vendor Product Version
libwav_project libwav *
CVE-2018-14050 MEDIUM

An issue has been found in libwav through 2017-04-20. It is a SEGV in the function wav_free in libwav.c.

CVSS 2.0

Severity: MEDIUM

Problem Type: NVD-CWE-noinfo,

Products Affected

Vendor Product Version
libwav_project libwav *
CVE-2018-14051 MEDIUM

The function wav_read in libwav.c in libwav through 2017-04-20 has an infinite loop.

CVSS 2.0

Severity: MEDIUM

Problem Type: CWE-835,

Products Affected

Vendor Product Version
libwav_project libwav *
CVE-2018-14052 MEDIUM

An issue has been found in libwav through 2017-04-20. It is a SEGV in the function apply_gain in wav_gain/wav_gain.c.

CVSS 2.0

Severity: MEDIUM

Problem Type: NVD-CWE-noinfo,

Products Affected

Vendor Product Version
libwav_project libwav *
CVE-2018-14549 MEDIUM

An issue has been found in libwav through 2017-04-20. It is a SEGV in the function wav_write in libwav.c.

CVSS 2.0

Severity: MEDIUM

Problem Type: NVD-CWE-noinfo,

Products Affected

Vendor Product Version
libwav_project libwav *
CVE-2019-16348 MEDIUM

marc-q libwav through 2017-04-20 has a NULL pointer dereference in gain_file() at wav_gain.c.

CVSS 3.x

Source Score Severity Vector Exploitability Impact
nvd@nist.gov 6.5 MEDIUM CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H 2.8 3.6

CVSS 2.0

Severity: MEDIUM

Problem Type: CWE-476,

Products Affected

Vendor Product Version
libwav_project libwav *
CVE-2019-19698 MEDIUM

marc-q libwav through 2017-04-20 has a NULL pointer dereference in wav_content_read() at libwav.c.

CVSS 3.x

Source Score Severity Vector Exploitability Impact
nvd@nist.gov 6.5 MEDIUM CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H 2.8 3.6

CVSS 2.0

Severity: MEDIUM

Problem Type: CWE-476,

Products Affected

Vendor Product Version
libwav_project libwav *
CVE-2022-28488 MEDIUM

The function wav_format_write in libwav.c in libwav through 2017-04-20 has an Use of Uninitialized Variable vulnerability.

CVSS 3.x

Source Score Severity Vector Exploitability Impact
nvd@nist.gov 7.5 HIGH CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N 3.9 3.6

CVSS 2.0

Severity: MEDIUM

Problem Type: CWE-908,

Products Affected

Vendor Product Version
libwav_project libwav *