6.7 Medium
AI Score
Confidence
Low
0.004 Low
EPSS
Percentile
72.2%
The wavpack_decode_frame function in libavcodec/wavpack.c in FFmpeg before 1.1 allows remote attackers to have an unspecified impact via crafted WavPack data, which triggers an out-of-bounds array access, possibly due to an off-by-one error.