Denial Of Service (DoS)

wavpack is vulnerable to denial of service (DoS). The vulnerability exists as an out-of-bounds write can occur because ParseRiffHeaderConfig in riff.c does not validate the sizes of unknown chunks before attempting memory allocation, related to a lack of integer-overflow protection within a bytes_to_copy calculation and subsequent malloc call, leading to insufficient memory allocation.