CVE-2021-44269
Published: 10 March 2022
An out of bounds read was found in Wavpack 5.4.0 in processing *.WAV files. This issue triggered in function WavpackPackSamples of file src/pack_utils.c, tainted variable cnt is too large, that makes pointer sptr read beyond heap bound.
Priority
CVSS 3 base score: 5.5
Status
Package | Release | Status |
---|---|---|
wavpack Launchpad, Ubuntu, Debian |
bionic |
Needed
|
focal |
Needed
|
|
impish |
Ignored
(reached end-of-life)
|
|
jammy |
Needed
|
|
kinetic |
Needed
|
|
upstream |
Pending
(5.5.0)
|
|
xenial |
Not vulnerable
(code not present)
|
|
Patches: upstream: https://github.com/dbry/WavPack/commit/773f9d0803c6888ae7d5391878d7337f24216f4a |