CVE-2018-20616: Ok-File-Formats Project Ok-File-Formats

High severity, CVSS 8.8. EPSS: 1.1% chance of exploitation in the next 30 days.

ok-file-formats through 2018-10-16 has a heap-based buffer overflow in the ok_wav_decode_ms_adpcm_data function in ok_wav.c.

Affected products

• Ok-File-Formats Project Ok-File-Formats: up to and including 20181016

Published 2018-12-31. Last modified 2026-06-17.