CVE-2017-16868

CVE-2017-16868 affects SWFTools 0.9.2. The vulnerability lies in the wav_convert2mono function (lib/wav.c), where a multiplication within a malloc call is not properly restricted, enabling an attacker to cause a denial of service via a crafted WAV file through integer overflow and NULL pointer de...