Threats tagged 'ghsa-xqq5-3h3q-pxq7'

FFmpeg versions through 9.0.2 have an integer overflow vulnerability in the wavpack_encode_init() function within libavcodec/wavpackenc.c. This flaw causes an infinite loop when calculating block size from the sample rate and channel count. An attacker can exploit this by providing a crafted audio file with a large sample rate and many channels, causing applications transcoding to WavPack to hang.