CVE-2019-1010315: Divide by Zero
Last updated 25 August 2025
Other sources
WavPack 5.1 and earlier is affected by: CWE 369: Divide by Zero. The impact is: Divide by zero can lead to sudden crash of a software/service that tries to parse a .wav file. The component is: ParseDsdiffHeaderConfig (dsdiff.c:282). The attack vector is: Maliciously crafted .wav file. The fixed version is: After commit https://github.com/dbry/WavPack/commit/4c0faba32fddbd0745cbfaf1e1aeb3da5d35b9fc.
— Launchpad
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
debian/wavpackto a version that resolves this vulnerability.Fixed in 5.4.0-1Fixed in 5.6.0-1Fixed in 5.8.1-1Fixed in 5.9.0-1 - Upgrade
Upgrade
alpine/wavpackto a version that resolves this vulnerability.Fixed in 5.1.0-r8 - Upgrade
Upgrade
alpine/wavpackto a version that resolves this vulnerability.Fixed in 5.1.0-r4
Event History
Frequently Asked Questions
What is the severity of CVE-2019-1010315?
CVE-2019-1010315 has a medium severity level due to the potential for application crashes caused by a divide by zero error.
How do I fix CVE-2019-1010315?
To fix CVE-2019-1010315, upgrade to WavPack version 5.1.0-2ubuntu1.4 or later on Ubuntu, or to versions 5.4.0-1, 5.6.0-1, or 5.7.0-1 on Debian.
What platforms are affected by CVE-2019-1010315?
CVE-2019-1010315 affects multiple platforms including Ubuntu (versions up to 5.1.0) and Debian (versions up to 5.1.0), as well as specific Fedora releases.
What is the impact of CVE-2019-1010315?
The impact of CVE-2019-1010315 is that it can lead to a sudden crash of software or services when parsing a maliciously crafted .wav file.
Who is responsible for the CVE-2019-1010315 vulnerability?
The CVE-2019-1010315 vulnerability is associated with WavPack versions 5.1 and earlier, specifically in the ParseDsdiffHeaderConfig function.