tocsin

Alpine/wavpack: high 7.8

The ParseDsdiffHeaderConfig function of the cli/dsdiff.c file of WavPack 5.1.0 allows a remote attacker to cause a denial-of-service (heap-based buffer over-read) or possibly overwrite the heap via a

Action: Upgrade wavpack to 5.1.0-r3 or later.

Affected

introducedfixedlast affected
05.1.0-r3-

Fixed versions

5.1.0-r3

Sources

published · modified · JSON