CVE-2021-44269
Published: 10 March 2022
An out of bounds read was found in Wavpack 5.4.0 in processing *.WAV files. This issue triggered in function WavpackPackSamples of file src/pack_utils.c, tainted variable cnt is too large, that makes pointer sptr read beyond heap bound.
Priority
Negligible
CVSS 3 base score: 5.5
Status
| Package | Release | Status |
|---|---|---|
|
wavpack Launchpad, Ubuntu, Debian |
bionic |
Needed
|
| focal |
Needed
|
|
| impish |
Ignored
(reached end-of-life)
|
|
| jammy |
Needed
|
|
| kinetic |
Needed
|
|
| upstream |
Pending
(5.5.0)
|
|
| xenial |
Not vulnerable
(code not present)
|
|
|
Patches: upstream: https://github.com/dbry/WavPack/commit/773f9d0803c6888ae7d5391878d7337f24216f4a |
||