ArchLinux: 202101-23: wavpack: arbitrary code execution
Summary
WavPack 5.3.0 has an out-of-bounds write in WavpackPackSamples in pack_utils.c because of an integer overflow in a malloc argument.
Resolution
Upgrade to 5.3.0-2.
# pacman -Syu "wavpack>=5.3.0-2"
The problem has been fixed upstream but no release is available yet.
References
https://bugs.archlinux.org/task/69234 https://github.com/dbry/WavPack/issues/91 https://github.com/dbry/WavPack/commit/63f3ec70129843dd64e11aa4c21c4a1cf00c9f1c https://github.com/dbry/WavPack/commit/89df160596132e3bd666322e1c20b2ebd4b92cd0 https://security.archlinux.org/CVE-2020-35738
Workaround
None.