Lucene search

K
osvGoogleOSV:ASB-A-170583712
HistoryJan 01, 2021 - 12:00 a.m.

wav_extractor_fuzzer: Unsigned-integer-overflow with empty stacktrace

2021-01-0100:00:00
Google
osv.dev
14
wav extraction
integer overflow
out of bounds write
information disclosure
remote exploitation
user interaction

EPSS

0.001

Percentile

39.9%

In WAVSource::read of WAVExtractor.cpp, there is a possible out of bounds write due to an integer overflow. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is needed for exploitation.

EPSS

0.001

Percentile

39.9%

Related for OSV:ASB-A-170583712