CVE-2022-28488

The function wav_format_write in libwav.c in libwav through 2017-04-20 has an Use of Uninitialized Variable vulnerability.

Score

CVSS 3.1 7.5 High

Status

Modified - cve@mitre.org

Published

2022-05-04

Last modified

2024-08-03

Weaknesses

CWE-908

Affected products

• Libwav (Libwav Project)

References

• https://github.com/marc-q/libwav/issues/29
• https://github.com/tin-z/Stuff_and_POCs/blob/main/poc_libwav/POC