Lookup for vulnerable packages by Package URL.
| Purl | pkg:apk/alpine/wavpack@5.1.0-r0?arch=aarch64&distroversion=v3.12&reponame=community |
| Type | apk |
| Namespace | alpine |
| Name | wavpack |
| Version | 5.1.0-r0 |
| Qualifiers |
| arch |
aarch64 |
| distroversion |
v3.12 |
| reponame |
community |
|
| Subpath | |
| Is_vulnerable | false |
| Next_non_vulnerable_version | 5.1.0-r3 |
| Latest_non_vulnerable_version | 5.4.0-r0 |
| Affected_by_vulnerabilities |
|
| Fixing_vulnerabilities |
| 0 |
| url |
VCID-6v71-q7hb-4qca |
| vulnerability_id |
VCID-6v71-q7hb-4qca |
| summary |
The WriteCaffHeader function in cli/caff.c in Wavpack before 5.1.0 allows remote attackers to cause a denial of service (out-of-bounds read) via a crafted WV file. |
| references |
| 0 |
|
| 1 |
| reference_url |
https://api.first.org/data/v1/epss?cve=CVE-2016-10170 |
| reference_id |
|
| reference_type |
|
| scores |
| 0 |
| value |
0.00427 |
| scoring_system |
epss |
| scoring_elements |
0.62717 |
| published_at |
2026-06-04T12:55:00Z |
|
| 1 |
| value |
0.00427 |
| scoring_system |
epss |
| scoring_elements |
0.62762 |
| published_at |
2026-06-07T12:55:00Z |
|
| 2 |
| value |
0.00427 |
| scoring_system |
epss |
| scoring_elements |
0.62761 |
| published_at |
2026-06-09T12:55:00Z |
|
| 3 |
| value |
0.00427 |
| scoring_system |
epss |
| scoring_elements |
0.62771 |
| published_at |
2026-06-06T12:55:00Z |
|
| 4 |
| value |
0.00427 |
| scoring_system |
epss |
| scoring_elements |
0.62747 |
| published_at |
2026-06-08T12:55:00Z |
|
|
| url |
https://api.first.org/data/v1/epss?cve=CVE-2016-10170 |
|
| 2 |
|
| 3 |
|
| 4 |
|
| 5 |
|
|
| fixed_packages |
|
| aliases |
CVE-2016-10170
|
| risk_score |
2.0 |
| exploitability |
0.5 |
| weighted_severity |
4.0 |
| resource_url |
http://public2.vulnerablecode.io/vulnerabilities/VCID-6v71-q7hb-4qca |
|
| 1 |
| url |
VCID-fa8r-pn8b-7khs |
| vulnerability_id |
VCID-fa8r-pn8b-7khs |
| summary |
The read_new_config_info function in open_utils.c in Wavpack before 5.1.0 allows remote attackers to cause a denial of service (out-of-bounds read) via a crafted WV file. |
| references |
| 0 |
|
| 1 |
| reference_url |
https://api.first.org/data/v1/epss?cve=CVE-2016-10172 |
| reference_id |
|
| reference_type |
|
| scores |
| 0 |
| value |
0.00222 |
| scoring_system |
epss |
| scoring_elements |
0.4486 |
| published_at |
2026-06-04T12:55:00Z |
|
| 1 |
| value |
0.00222 |
| scoring_system |
epss |
| scoring_elements |
0.4493 |
| published_at |
2026-06-05T12:55:00Z |
|
| 2 |
| value |
0.00222 |
| scoring_system |
epss |
| scoring_elements |
0.44937 |
| published_at |
2026-06-06T12:55:00Z |
|
| 3 |
| value |
0.00222 |
| scoring_system |
epss |
| scoring_elements |
0.44916 |
| published_at |
2026-06-07T12:55:00Z |
|
| 4 |
| value |
0.00222 |
| scoring_system |
epss |
| scoring_elements |
0.44887 |
| published_at |
2026-06-08T12:55:00Z |
|
| 5 |
| value |
0.00222 |
| scoring_system |
epss |
| scoring_elements |
0.44898 |
| published_at |
2026-06-09T12:55:00Z |
|
|
| url |
https://api.first.org/data/v1/epss?cve=CVE-2016-10172 |
|
| 2 |
|
| 3 |
|
| 4 |
|
| 5 |
|
|
| fixed_packages |
|
| aliases |
CVE-2016-10172
|
| risk_score |
2.0 |
| exploitability |
0.5 |
| weighted_severity |
4.0 |
| resource_url |
http://public2.vulnerablecode.io/vulnerabilities/VCID-fa8r-pn8b-7khs |
|
| 2 |
| url |
VCID-hmnv-xck1-d7hx |
| vulnerability_id |
VCID-hmnv-xck1-d7hx |
| summary |
The read_code function in read_words.c in Wavpack before 5.1.0 allows remote attackers to cause a denial of service (out-of-bounds read) via a crafted WV file. |
| references |
| 0 |
|
| 1 |
| reference_url |
https://api.first.org/data/v1/epss?cve=CVE-2016-10169 |
| reference_id |
|
| reference_type |
|
| scores |
| 0 |
| value |
0.00435 |
| scoring_system |
epss |
| scoring_elements |
0.63193 |
| published_at |
2026-06-04T12:55:00Z |
|
| 1 |
| value |
0.00435 |
| scoring_system |
epss |
| scoring_elements |
0.63237 |
| published_at |
2026-06-05T12:55:00Z |
|
| 2 |
| value |
0.00435 |
| scoring_system |
epss |
| scoring_elements |
0.63245 |
| published_at |
2026-06-06T12:55:00Z |
|
| 3 |
| value |
0.00435 |
| scoring_system |
epss |
| scoring_elements |
0.63235 |
| published_at |
2026-06-07T12:55:00Z |
|
| 4 |
| value |
0.00435 |
| scoring_system |
epss |
| scoring_elements |
0.63221 |
| published_at |
2026-06-08T12:55:00Z |
|
| 5 |
| value |
0.00435 |
| scoring_system |
epss |
| scoring_elements |
0.63239 |
| published_at |
2026-06-09T12:55:00Z |
|
|
| url |
https://api.first.org/data/v1/epss?cve=CVE-2016-10169 |
|
| 2 |
|
| 3 |
|
| 4 |
|
| 5 |
|
| 6 |
|
|
| fixed_packages |
|
| aliases |
CVE-2016-10169
|
| risk_score |
2.0 |
| exploitability |
0.5 |
| weighted_severity |
4.0 |
| resource_url |
http://public2.vulnerablecode.io/vulnerabilities/VCID-hmnv-xck1-d7hx |
|
| 3 |
| url |
VCID-kz91-79an-87dn |
| vulnerability_id |
VCID-kz91-79an-87dn |
| summary |
The unreorder_channels function in cli/wvunpack.c in Wavpack before 5.1.0 allows remote attackers to cause a denial of service (out-of-bounds read) via a crafted WV file. |
| references |
| 0 |
|
| 1 |
| reference_url |
https://api.first.org/data/v1/epss?cve=CVE-2016-10171 |
| reference_id |
|
| reference_type |
|
| scores |
| 0 |
| value |
0.00222 |
| scoring_system |
epss |
| scoring_elements |
0.4486 |
| published_at |
2026-06-04T12:55:00Z |
|
| 1 |
| value |
0.00222 |
| scoring_system |
epss |
| scoring_elements |
0.4493 |
| published_at |
2026-06-05T12:55:00Z |
|
| 2 |
| value |
0.00222 |
| scoring_system |
epss |
| scoring_elements |
0.44937 |
| published_at |
2026-06-06T12:55:00Z |
|
| 3 |
| value |
0.00222 |
| scoring_system |
epss |
| scoring_elements |
0.44916 |
| published_at |
2026-06-07T12:55:00Z |
|
| 4 |
| value |
0.00222 |
| scoring_system |
epss |
| scoring_elements |
0.44887 |
| published_at |
2026-06-08T12:55:00Z |
|
| 5 |
| value |
0.00222 |
| scoring_system |
epss |
| scoring_elements |
0.44898 |
| published_at |
2026-06-09T12:55:00Z |
|
|
| url |
https://api.first.org/data/v1/epss?cve=CVE-2016-10171 |
|
| 2 |
|
| 3 |
|
| 4 |
|
| 5 |
|
|
| fixed_packages |
|
| aliases |
CVE-2016-10171
|
| risk_score |
2.0 |
| exploitability |
0.5 |
| weighted_severity |
4.0 |
| resource_url |
http://public2.vulnerablecode.io/vulnerabilities/VCID-kz91-79an-87dn |
|
|
| Risk_score | null |
| Resource_url | http://public2.vulnerablecode.io/packages/pkg:apk/alpine/wavpack@5.1.0-r0%3Farch=aarch64&distroversion=v3.12&reponame=community |