tocsin

Alpine/wavpack: high 7.8

An issue was discovered in WavPack 5.1.0 and earlier. The WAV parser component contains a vulnerability that allows writing to memory because ParseRiffHeaderConfig in riff.c does not reject multiple f

Action: Upgrade wavpack to 5.1.0-r2 or later.

Affected

introducedfixedlast affected
05.1.0-r2-

Fixed versions

5.1.0-r2

Sources

published · modified · JSON