Rocky Linux 8 [CIQ] Security Update: wavpack / wavpack-debuginfo / wavpack-debugsource / wavpack-devel (crlsa-2022_7558)

The Rocky Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CIQ crlsa-20227558 advisory. wavpack: Heap out-of-bounds read in WavpackPackSamples CVE-2021-44269 Tenable has extracted the preceding description block directly from the CIQ security advisory...

Rocky Linux 9 [CIQ] Security Update: wavpack / wavpack-debuginfo / wavpack-debugsource / wavpack-devel (crlsa-2022_8139)

The Rocky Linux 9 host has packages installed that are affected by a vulnerability as referenced in the CIQ crlsa-20228139 advisory. wavpack: Heap out-of-bounds read in WavpackPackSamples CVE-2021-44269 Tenable has extracted the preceding description block directly from the CIQ security advisory...

WavPack Heap Buffer Overflow DoS

The vulnerability of the WavpackPackSamples function in the WavPack audio codec lies in the ability to exploit it by reading beyond the buffer boundaries of memory. Exploiting this vulnerability could allow an attacker to cause a service failure using a specially crafted file...

SUSE CVE-2021-44269

An out of bounds read was found in Wavpack 5.4.0 in processing .WAV files. This issue triggered in function WavpackPackSamples of file src/packutils.c, tainted variable cnt is too large, that makes pointer sptr read beyond heap bound...

Rocky Linux 8 : wavpack (RLSA-2022:7558)

The remote Rocky Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RLSA-2022:7558 advisory. - An out of bounds read was found in Wavpack 5.4.0 in processing .WAV files. This issue triggered in function WavpackPackSamples of file src/packutils.c, tainted...

wavpack: Heap out-of-bounds read in WavpackPackSamples()

A heap out-of-bounds read flaw was found in WavPacks' WavpackPackSamples function of src/packutils.c and only affects the command-line program of WavPack not libwavpack. This flaw allows an attacker to exploit this flaw for a website that uses the WavPack command-line program on user-provided...

CVE-2021-44269

A heap out-of-bounds read flaw was found in WavPacks' WavpackPackSamples function of src/packutils.c and only affects the command-line program of WavPack not libwavpack. This flaw allows an attacker to exploit this flaw for a website that uses the WavPack command-line program on user-provided...

CVE-2021-44269

An out of bounds read was found in Wavpack 5.4.0 in processing .WAV files. This issue triggered in function WavpackPackSamples of file src/packutils.c, tainted variable cnt is too large, that makes pointer sptr read beyond heap bound...

CVE-2021-44269

An out of bounds read was found in Wavpack 5.4.0 in processing .WAV files. This issue triggered in function WavpackPackSamples of file src/packutils.c, tainted variable cnt is too large, that makes pointer sptr read beyond heap bound...

UBUNTU-CVE-2021-44269

An out of bounds read was found in Wavpack 5.4.0 in processing .WAV files. This issue triggered in function WavpackPackSamples of file src/packutils.c, tainted variable cnt is too large, that makes pointer sptr read beyond heap bound...

CVE-2021-44269

An out of bounds read was found in Wavpack 5.4.0 in processing .WAV files. This issue triggered in function WavpackPackSamples of file src/packutils.c, tainted variable cnt is too large, that makes pointer sptr read beyond heap bound...

CVE-2021-44269: Out-of-bounds Read

An out of bounds read was found in Wavpack 5.4.0 in processing .WAV files. This issue triggered in function WavpackPackSamples of file src/packutils.c, tainted variable cnt is too large, that makes pointer sptr read beyond heap bound...

CVE-2020-35738

WavPack 5.3.0 has an out-of-bounds write in WavpackPackSamples in packutils.c because of an integer overflow in a malloc argument. NOTE: some third-parties claim that there are later "unofficial" releases through 5.3.2, which are also affected. Mitigation If using the wavpack utility, this flaw c...

CVE-2020-35738

WavPack 5.3.0 has an out-of-bounds write in WavpackPackSamples in packutils.c because of an integer overflow in a malloc argument. NOTE: some third-parties claim that there are later "unofficial" releases through 5.3.2, which are also affected...