CVE-2021-44269: Fedoraproject Fedora

Medium severity, CVSS 5.5. EPSS: 1.2% chance of exploitation in the next 30 days.

An out of bounds read was found in Wavpack 5.4.0 in processing *.WAV files. This issue triggered in function WavpackPackSamples of file src/pack_utils.c, tainted variable cnt is too large, that makes pointer sptr read beyond heap bound.

Affected products

• Fedoraproject Fedora: version 34 only; version 35 only; version 36 only
• Wavpack Wavpack: version 5.4.0 only

Published 2022-03-10. Last modified 2026-06-17.