CVE-2019-11498

MediumCVSS 6.5/10Last modified Jun 17, 2026

Description

WavpackSetConfiguration64 in pack_utils.c in libwavpack.a in WavPack through 5.1.0 has a "Conditional jump or move depends on uninitialised value" condition, which might allow attackers to cause a denial of service (application crash) via a DFF file that lacks valid sample-rate data.

Metrics

CVSS 3.1 6.5/10CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

Weakness enumeration

CWE-824

Affected software

No affected versions have been published.

Timeline

Published
Apr 24, 2019
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2019

CVE-2019-114997.5In the IMAP Server in Dovecot 2.3.3 through 2.3.5.2, the submission-login component crashes if AUTH PLAIN is attempted over a TLS secured chCVE-2019-11508.8A remote code execution vulnerability exists when the Windows font library improperly handles specially crafted embedded fonts. An attacker CVE-2019-115009.8In Dovecot before 2.2.36.4 and 2.3.x before 2.3.7.2 (and Pigeonhole before 0.5.7.2), protocol processing can fail for quoted strings. This oCVE-2019-115027.5snap-confine in snapd before 2.38 incorrectly set the ownership of a snap application to the uid and gid of the first calling user. ConsequeCVE-2019-115037.5snap-confine as included in snapd before 2.39 did not guard against symlink races when performing the chdir() to the current working directoCVE-2019-115044.8Zotonic before version 0.47 has mod_admin XSS.CVE-2019-115058.8In GraphicsMagick from version 1.3.8 to 1.4 snapshot-20190403 Q8, there is a heap-based buffer overflow in the function WritePDBImage of codCVE-2019-115068.8In GraphicsMagick from version 1.3.30 to 1.4 snapshot-20190403 Q8, there is a heap-based buffer overflow in the function WriteMATLABImage ofCVE-2019-115076.1In Pulse Secure Pulse Connect Secure (PCS) 8.3.x before 8.3R7.1 and 9.0.x before 9.0R3, an XSS issue has been found on the Application LauncCVE-2019-115087.2In Pulse Secure Pulse Connect Secure (PCS) before 8.1R15.1, 8.2 before 8.2R12.1, 8.3 before 8.3R7.1, and 9.0 before 9.0R3.4, an authenticateCVE-2019-115098.8In Pulse Secure Pulse Connect Secure (PCS) before 8.1R15.1, 8.2 before 8.2R12.1, 8.3 before 8.3R7.1, and 9.0 before 9.0R3.4 and Pulse PolicyCVE-2019-11518.8A remote code execution vulnerability exists when the Windows font library improperly handles specially crafted embedded fonts. An attacker
CVE-2019-11498: Medium severity, CVSS 6.5 | Vulnix