Wavpack · Wavpack · CVE-2020-35738
**Name of the Vulnerable Software and Affected Versions**
WavPack versions 5.3.0 through 5.3.2
**Description**
The issue is related to an out-of-bounds write in the `WavpackPackSamples` function in the `pack utils.c` file due to an integer overflow in a `malloc` argument. This can allow a remote attacker to compromise data integrity and cause a denial of service.
**Recommendations**
For WavPack versions 5.3.0 through 5.3.2, consider disabling the `WavpackPackSamples` function as a temporary workaround until a patch is available.
At the moment, there is no information about a newer version that contains a fix for this vulnerability.