CVE ID:	CVE-2020-35738
Description:	WavPack 5.3.0 has an out-of-bounds write in WavpackPackSamples in pack_utils.c because of an integer overflow in a malloc argument. NOTE: some third-parties claim that there are later "unofficial" releases through 5.3.2, which are also affected.
Test IDs:	1.3.6.1.4.1.25623.1.1.10.2021.0271   1.3.6.1.4.1.25623.1.1.2.2021.1177   1.3.6.1.4.1.25623.1.0.878881   1.3.6.1.4.1.25623.1.0.878837   1.3.6.1.4.1.25623.1.1.4.2021.14669.1   1.3.6.1.4.1.25623.1.1.13.2021.014.01   1.3.6.1.4.1.25623.1.0.844774   1.3.6.1.4.1.25623.1.1.4.2021.0929.1
Cross References:	Common Vulnerability Exposure (CVE) ID: CVE-2020-35738 https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/76B7K6F74FDQATG7FECXR5KPIG52O2VL/ https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/2YZLKYE66EU4XRHTABV5LB2G7ZDZ422F/ https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/VDFY4NGGDUTLVID5PNVU7LL2G2ZJLZFY/ https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/PENN4ZXRPZULEJOYTTLUZMBZ5H46QTUC/ https://github.com/dbry/WavPack/issues/91 https://lists.debian.org/debian-lts-announce/2021/01/msg00013.html