diff --git a/libavformat/wavdec.c b/libavformat/wavdec.c
index 0912359133..3a8bc882d8 100644
--- a/libavformat/wavdec.c
+++ b/libavformat/wavdec.c
@@ -689,6 +689,8 @@ smv_out:
                 goto smv_retry;
             return AVERROR_EOF;
         }
+        if (INT64_MAX - left < avio_tell(s->pb))
+            return AVERROR_INVALIDDATA;
         wav->data_end = avio_tell(s->pb) + left;
     }