Alerts This Week
Warning Icon 1 692
Alerts This Week
Warning Icon 1 692

Mageia: 2022-0125 High: Wavpack Out Of Bounds Read Security Fix

mageia
Calendar Grey March 31, 2022
Dist Mageia Esm H88
Mageia 2022-0126 provides insights into a key libjpeg-turbo enhancement aimed at resolving a significant buffer overflow flaw identified in version 2.1.2.
An out of bounds read was found in Wavpack 5.4.0 in processing *.WAV files

Summary

An out of bounds read was found in Wavpack 5.4.0 in processing *.WAV files. This issue triggered in function WavpackPackSamples of file src/pack_utils.c, tainted variable cnt is too large, that makes pointer sptr read beyond heap bound. (CVE-2021-44269)

References

- https://bugs.mageia.org/show_bug.cgi?id=30215

-

- https://www.cve.org/CVERecord?id=CVE-2021-44269

Topics%20covered

Topics Covered

security advisory security fix critical update heap overflow out of bounds Mageia Wavpack

Resolution

SRPMS

- 8/core/wavpack-5.3.2-2.1.mga8

Publication date: 31 Mar 2022
URL: https://advisories.mageia.org/MGASA-2022-0125.html
Type: security
CVE: CVE-2021-44269

Topics%20covered

Topics Covered

security advisory security fix critical update heap overflow out of bounds Mageia Wavpack

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Related News

Your message here