Join GitHub today
GitHub is home to over 31 million developers working together to host and review code, manage projects, and build software together.Sign up
WavPack crashes -- SEGFAULT -- Invalid write #33
This bug was found with AFLSmart, an extension of AFL. Thanks also to Marcel Böhme, Andrew Santosa and Alexandru Razvan Caciulescu. This could lead to denial of service and potentially code execution.
This bug was found on Ubuntu 16.04 64-bit & WavPack revision 0a7295 (HEAD)
Here is our analysis:
added a commit
Apr 25, 2018
Thanks, David, for applying the patch so promptly.
For posteriority: MITRE assigned