CVE-2021-44269: Medium severity wavpack vulnerability
Published Mar 10, 2022
·Updated
An out of bounds read was found in Wavpack 5.4.0 in processing .WAV files. This issue triggered in function WavpackPackSamples of file src/packutils.c, tainted variable cnt is too large, that makes pointer sptr read beyond heap bound.
Affected Software
4 affected components
WavPack Wavpack=5.4.0
Fedoraproject Fedora=34
Fedoraproject Fedora=35
Fedoraproject Fedora=36
Remediation
Patch Available
Event History
Mar 10, 2022
CVE Published
via MITRE·04:13 PM
Data Sourced
via MITRE·04:13 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2021-44269?
The severity of CVE-2021-44269 is classified as medium due to the potential for exploitation causing out of bounds read conditions.
2
How do I fix CVE-2021-44269?
To fix CVE-2021-44269, it is recommended to upgrade Wavpack to version 5.4.1 or later where the issue has been addressed.
3
Which versions of Wavpack are affected by CVE-2021-44269?
CVE-2021-44269 affects Wavpack version 5.4.0.
4
What type of vulnerability is CVE-2021-44269?
CVE-2021-44269 is an out of bounds read vulnerability in Wavpack when processing certain WAV files.
5
Which operating systems are impacted by CVE-2021-44269?
CVE-2021-44269 impacts Fedora versions 34, 35, and 36 when running the affected Wavpack version.