diff --git a/libavformat/wavdec.c b/libavformat/wavdec.c
index 0df6172b31..c06e4c65da 100644
--- a/libavformat/wavdec.c
+++ b/libavformat/wavdec.c
@@ -702,6 +702,8 @@ smv_out:
                 goto smv_retry;
             return AVERROR_EOF;
         }
+        if (INT64_MAX - left < avio_tell(s->pb))
+            return AVERROR_INVALIDDATA;
         wav->data_end = avio_tell(s->pb) + left;
     }