There is 1 open security issue in buster.
1 issue left for the package maintainer to handle:
- CVE-2020-35738:
(needs triaging)
WavPack 5.3.0 has an out-of-bounds write in WavpackPackSamples in pack_utils.c because of an integer overflow in a malloc argument. NOTE: some third-parties claim that there are later "unofficial" releases through 5.3.2, which are also affected.
You can find information about how to handle this issue in the security team's documentation.
![[bug history graph]](https://qa.debian.org/data/bts/graphs/w/wavpack.png){kind=link}