#VU16282 Out-of-bounds read in WavPack - CVE-2018-19841

Vulnerability identifier: #VU16282

Vulnerability risk: Low

CVSSv4.0: 5.2 [CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:A/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:P/U:Clear]

CVE-ID: CVE-2018-19841

CWE-ID: CWE-125

Exploitation vector: Network

Exploit availability: No

Vulnerable software:
WavPack
Client/Desktop applications / Multimedia software

Vendor: wavpack

Description

The vulnerability allows a remote attacker to cause DoS condition on the target system.

The vulnerability exists in the WavpackVerifySingleBlock function, as defined in the open_utils.c source code file due to improper processing of WavPack lossless audio files. A remote attacker can trick the victim into accessing a WavPack lossless audio file that submits malicious, trigger an out-of-bounds read condition and cause the affected software to crash, resulting in a DoS condition.

Mitigation
Install update from vendor's website.

Vulnerable software versions

WavPack: 4.1 - 5.1.0

---

External links
https://github.com/dbry/WavPack/issues/54

---

Q & A

Can this vulnerability be exploited remotely?

Yes. This vulnerability can be exploited by a remote non-authenticated attacker via the Internet.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability. However, proof of concept for this vulnerability is available.