RAOP module accepts unbounded Content-Length values and does not check the pw_array_add() return.
Weakness
The product dereferences a pointer that it expects to be valid but is NULL.
Affected Software
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Red Hat Enterprise Linux 10 | RedHat | pipewire-0:1.4.11-1.el10_2.1 | * |
| Red Hat Enterprise Linux 9 | RedHat | pipewire-0:1.4.11-1.el9_8.2 | * |
| Pipewire | Ubuntu | noble | * |
| Pipewire | Ubuntu | questing | * |
| Pipewire | Ubuntu | resolute | * |
| Pipewire | Ubuntu | upstream | * |