wavpack -- integer overflow in pack_utils.c

The wavpack project reports: src/packutils.c - issue 91: fix integer overflows resulting in buffer overruns CVE-2020-35738 - sanitize configuration parameters better improves clarity and aids debugging...

CVE-2020-35738

WavPack 5.3.0 has an out-of-bounds write in WavpackPackSamples in packutils.c because of an integer overflow in a malloc argument. NOTE: some third-parties claim that there are later "unofficial" releases through 5.3.2, which are also affected. Mitigation If using the wavpack utility, this flaw c...

CVE-2020-35738

WavPack 5.3.0 has an out-of-bounds write in WavpackPackSamples in packutils.c because of an integer overflow in a malloc argument. NOTE: some third-parties claim that there are later "unofficial" releases through 5.3.2, which are also affected...

CVE-2020-35738

WavPack 5.3.0 has an out-of-bounds write in WavpackPackSamples in packutils.c because of an integer overflow in a malloc argument. NOTE: some third-parties claim that there are later "unofficial" releases through 5.3.2, which are also affected...

DEBIAN-CVE-2020-35738

WavPack 5.3.0 has an out-of-bounds write in WavpackPackSamples in packutils.c because of an integer overflow in a malloc argument. NOTE: some third-parties claim that there are later "unofficial" releases through 5.3.2, which are also affected...

UBUNTU-CVE-2020-35738

WavPack 5.3.0 has an out-of-bounds write in WavpackPackSamples in packutils.c because of an integer overflow in a malloc argument. NOTE: some third-parties claim that there are later "unofficial" releases through 5.3.2, which are also affected...

CVE-2020-35738

WavPack 5.3.0 has an out-of-bounds write in WavpackPackSamples in packutils.c because of an integer overflow in a malloc argument. NOTE: some third-parties claim that there are later "unofficial" releases through 5.3.2, which are also affected...

Integer overflow

WavPack 5.3.0 has an out-of-bounds write in WavpackPackSamples in packutils.c because of an integer overflow in a malloc argument. NOTE: some third-parties claim that there are later "unofficial" releases through 5.3.2, which are also affected...

CVE-2020-35738

WavPack 5.3.0 has an out-of-bounds write in WavpackPackSamples in packutils.c because of an integer overflow in a malloc argument. NOTE: some third-parties claim that there are later "unofficial" releases through 5.3.2, which are also affected...

CVE-2020-35738

WavPack 5.3.0 has an out-of-bounds write in WavpackPackSamples in packutils.c because of an integer overflow in a malloc argument. NOTE: some third-parties claim that there are later "unofficial" releases through 5.3.2, which are also affected...

CVE-2020-35738

WavPack 5.3.0 has an out-of-bounds write in WavpackPackSamples in packutils.c because of an integer overflow in a malloc argument. NOTE: some third-parties claim that there are later "unofficial" releases through 5.3.2, which are also affected...

CVE-2020-35738

CVE-2020-35738 affects WavPack, specifically version 5.3.0. The vulnerability is an out-of-bounds write in WavpackPackSamples (pack_utils.c) caused by an integer overflow in a malloc argument. Connected advisories corroborate impact variants including arbitrary code execution (Arch Linux ASA-2021...

WavPack 缓冲区错误漏洞

WavPack is a free, open source lossless audio compression format with a .wv file extension. An out-of-bounds write vulnerability exists in WavpackPackSamples in packutils.c in WavPack 5.3.0, which stems from an integer overflow in the malloc parameter and can be exploited by an attacker to cause ...

PT-2020-5481 · Wavpack +5 · Wavpack +5

Name of the Vulnerable Software and Affected Versions: WavPack versions 5.3.0 through 5.3.2 Description: The issue is related to an out-of-bounds write in the WavpackPackSamples function in the pack utils.c file due to an integer overflow in a malloc argument. This can allow a remote attacker to...

SUSE SLES12 Security Update : wavpack (SUSE-SU-2020:2727-1)

This update for wavpack fixes the following issues : Security issues fixed : CVE-2018-19840: Fixed a denial-of-service in the WavpackPackInit function from packutils.c bsc1120930 Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security...

Denial Of Service (DoS)

wavpack is vulnerable to denial of service DoS. The vulnerability exists in the WriteCaffHeader function in cli/caff.c, allowing a malicious user to crash the application via a crafted WV file...

Denial Of Service (DoS)

Wavpack is vulnerability to denial of service. This vulnerability allows remote attackers to cause a denial of service out-of-bounds read via a crafted WV file...

Denial Of Service (DoS)

wavpack is vulnerable to denial of service. An out-of-bounds read in the readnewconfiginfo function in openutils.c allows a remote attacker to cause a denial of service via a malicious WV file...

Denial Of Service (DoS)

wavpack is vulnerable to denial of service. The readcode function in readwords.c allows remote attackers to cause a denial of service out-of-bounds read via a malicious WV file...

RHEL 8 : wavpack (RHSA-2020:1581)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2020:1581 advisory. WavPack is a completely open audio compression format providing lossless, high-quality lossy, and a unique hybrid compression mode. Security...