wavpack is vulnerable to denial of service (DoS). The vulnerability exists through the use of uninitialized variable in ParseCaffHeaderConfig leads to DoS.
access.redhat.com/documentation/en-us/red_hat_enterprise_linux/8/html/8.2_release_notes/index
access.redhat.com/errata/RHSA-2020:1581
access.redhat.com/security/updates/classification/#low
github.com/dbry/WavPack/commit/f68a9555b548306c5b1ee45199ccdc4a16a6101b
github.com/dbry/WavPack/issues/66
lists.debian.org/debian-lts-announce/2021/01/msg00013.html
lists.fedoraproject.org/archives/list/[email protected]/message/6CFFFWIWALGQPKINRDW3PRGRD5LOLGZA/
lists.fedoraproject.org/archives/list/[email protected]/message/BRWQNE3TH5UF64IKHKKHVCHJHUOVKJUH/
lists.fedoraproject.org/archives/list/[email protected]/message/IX3J2JML5A7KC2BLGBEFTIIZR3EM7LVJ/
lists.fedoraproject.org/archives/list/[email protected]/message/PYESOAZ6Z6IG4BQBURL6OUY6P4YB6SKS/
usn.ubuntu.com/4062-1/