WavpackSetConfiguration64 in pack_utils.c in libwavpack.a in WavPack through 5.1.0 has a "Conditional jump or move depends on uninitialised value" condition, which might allow attackers to cause a denial of service via a DFF file that lacks valid sample-rate data.WavPack 5.1 and earlier in component ParseDsdiffHeaderConfig has a Divide by Zero, leading to sudden crash of a software/service that tries to parse a maliciously crafted .wav file.WavPack 5.1.0 and earlier is affected by: CWE-457: Use of Uninitialized Variable. The impact is: Unexpected control flow, crashes, and segfaults. The component is: ParseCaffHeaderConfig . The attack vector is: Maliciously crafted .wav file.WavPack 5.1.0 and earlier is affected by: CWE-457: Use of Uninitialized Variable. The impact is: Unexpected control flow, crashes, and segfaults. The component is: ParseWave64HeaderConfig . The attack vector is: Maliciously crafted .wav file.