CVE-2020-35738
MEDIUM 6.1EPSS 1.2%
WavPack 5.3.0 has an out-of-bounds write in WavpackPackSamples in pack_utils.c because of an integer overflow in a malloc argument. NOTE: some third-parties claim that there are later "unofficial" releases through 5.3.2, which are also affected.
- CVSS v3.1
- 6.1 MEDIUM
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:H - CVSS v2.0
- 5.8 MEDIUM
AV:N/AC:M/Au:N/C:N/I:P/A:P - EPSS
- 1.20% chance of exploitation in the next 30 days, 66th percentile
- Published
- 2020-12-28
- Updated
- 2024-08-04