WavPack 5.4.0
Approved changes feed: RSS · Atom
cpe:2.3:a:wavpack:wavpack:5.4.0:*:*:*:*:*:*:*part: a version: 5.4.0 update: *
| Vendor | Wavpack (56815195-2316-562c-8a09-6c4ba8f4f803) |
|---|---|
| Product | Wavpack (686f5c36-b66d-51c7-8426-5e1aa294207c) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
Notes
Imported from NVD CPE 2.0 feed
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
pkg:deb/debian/wavpack |
purl2cpe | 2026-06-01 10:16:23.083361 |
pkg:deb/ubuntu/wavpack |
purl2cpe | 2026-06-01 10:16:23.083362 |
pkg:github/dbry/wavpack |
purl2cpe | 2026-06-01 10:16:23.083363 |
pkg:gitlab/redhat/wavpack |
purl2cpe | 2026-06-01 10:16:23.083365 |
pkg:rpm/centos/wavpack |
purl2cpe | 2026-06-01 10:16:23.083366 |
pkg:rpm/fedora/wavpack |
purl2cpe | 2026-06-01 10:16:23.083368 |
pkg:rpm/opensuse/wavpack |
purl2cpe | 2026-06-01 10:16:23.083369 |
pkg:sourceforge/wavpack |
purl2cpe | 2026-06-01 10:16:23.083371 |
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2022-2476 |
vulnerable | 2026-06-08 05:43:35.632768 |
Details available
A null pointer dereference bug was found in wavpack-5.4.0 The results from the ASAN log: AddressSanitizer:DEADLYSIGNAL ===================================================================84257==ERROR: AddressSanitizer: SEGV on unknown address 0x000000000000 (pc 0x561b47a970c6 bp 0x7fff13952fb0 sp 0x7fff1394fca0 T0) ==84257==The signal is caused by a WRITE memory access. ==84257==Hint: address points to the zero page. #0 0x561b47a970c5 in main cli/wvunpack.c:834 #1 0x7efc4f5c0082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) #2 0x561b47a945ed in _start (/usr/local/bin/wvunpack+0xa5ed) AddressSanitizer can not provide additional info. SUMMARY: AddressSanitizer: SEGV cli/wvunpack.c:834 in main ==84257==ABORTING
Published: 2022-07-19T00:00:00.000Z
Updated: 2024-08-03T00:39:07.680Z Reference links
|
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-44269 |
vulnerable | 2026-06-08 05:36:45.642766 |
Details available
An out of bounds read was found in Wavpack 5.4.0 in processing *.WAV files. This issue triggered in function WavpackPackSamples of file src/pack_utils.c, tainted variable cnt is too large, that makes pointer sptr read beyond heap bound.
Published: 2022-03-10T16:13:27.000Z
Updated: 2024-08-04T04:17:24.921Z Reference links
|
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.
Inspect record JSON
Open this panel to browse, search, copy or download the JSON record.