WavPack 5.3.0 has an out-of-bounds write in WavpackPackSamples in pack_utils.c because of an integer overflow in a malloc argument.

Summary

WavPack 5.3.0 has an out-of-bounds write in WavpackPackSamples in pack_utils.c because of an integer overflow in a malloc argument. NOTE: some third-parties claim that there are later "unofficial" releases through 5.3.2, which are also affected.

Timeline

1. Dec 28, 2020, 3:54 AM UTCCVE published
2. Aug 4, 2024, 5:09 PM UTCRecord last updated

Affected versions

• n/a n/a

  Version range not reported

References 6