Skip to content
OpenAdvisories

Package · crates.io

wasapi

1 known vulnerabilities.

1 result · Feed

  • Unscored —

    `WaveFormat::parse` reads past the end of a `&WAVEFORMATEX`

    `WaveFormat::parse` is a safe function that takes a `&WAVEFORMATEX`, which is only valid for reads of `size_of::<WAVEFORMATEX>()` (18) bytes. When the header has `wFormatTag == WAVE_FORMAT_EXTENSIBLE` and `cbSize >= 22`, the function reinterprets the referenc…