Libwav Project Libwav — known CVE vulnerabilities

Every CVE whose affected-product data names Libwav Project Libwav, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (8)

• CVE-2018-14051 — CVSS 7.5 (high): The function wav_read in libwav.c in libwav through 2017-04-20 has an infinite loop.
• CVE-2022-28488 — CVSS 7.5 (high): The function wav_format_write in libwav.c in libwav through 2017-04-20 has an Use of Uninitialized Variable vulnerability.
• CVE-2018-14052 — CVSS 6.5 (medium): An issue has been found in libwav through 2017-04-20. It is a SEGV in the function apply_gain in wav_gain/wav_gain.c.
• CVE-2018-14049 — CVSS 6.5 (medium): An issue has been found in libwav through 2017-04-20. It is a SEGV in the function print_info in wav_info/wav_info.c.
• CVE-2019-16348 — CVSS 6.5 (medium): marc-q libwav through 2017-04-20 has a NULL pointer dereference in gain_file() at wav_gain.c.
• CVE-2019-19698 — CVSS 6.5 (medium): marc-q libwav through 2017-04-20 has a NULL pointer dereference in wav_content_read() at libwav.c.
• CVE-2018-14549 — CVSS 6.5 (medium): An issue has been found in libwav through 2017-04-20. It is a SEGV in the function wav_write in libwav.c.
• CVE-2018-14050 — CVSS 6.5 (medium): An issue has been found in libwav through 2017-04-20. It is a SEGV in the function wav_free in libwav.c.