This page tracks the Debian fix status. The vulnerability itself is described on the main CVE page. View CVE-2021-44269 →

DEBIAN-CVE-2021-44269

An out of bounds read was found in Wavpack 5.4.0 in processing *.WAV files. This issue triggered in function WavpackPackSamples of file src/pack_utils...

Original description

The description as published by the source.

An out of bounds read was found in Wavpack 5.4.0 in processing *.WAV files. This issue triggered in function WavpackPackSamples of file src/pack_utils.c, tainted variable cnt is too large, that makes pointer sptr read beyond heap bound.

Source: OSV.dev (Open Source Vulnerabilities) OSV

Affected packages

Debian:12 wavpack

[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.5.0-1"}]}]

Debian:13 wavpack

[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.5.0-1"}]}]

Debian:14 wavpack

[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.5.0-1"}]}]

References

advisory security-tracker.debian.org