CVE:CVE-2020-35738
CNNVD:CNNVD-202012-1606
WavPack是一套开源的、免费的音频无损压缩软件。
WavPack 5.3.0 存在缓冲区错误漏洞，该漏洞源于malloc参数中有一个整数溢出。
solution:Upgrade wavpack wavpack to a higher version than 5.3.0,and avoid the version 5.3.0; Upgrade debian debian_linux to a higher version than 9.0,and avoid the version 9.0; Upgrade fedoraproject fedora to a higher version than 32,33,and avoid the version 32,33