diff --git a/libavformat/wavdec.c b/libavformat/wavdec.c
index 840e9b32e9..d0e65adf16 100644
--- a/libavformat/wavdec.c
+++ b/libavformat/wavdec.c
@@ -704,6 +704,8 @@ smv_out:
                 goto smv_retry;
             return AVERROR_EOF;
         }
+        if (INT64_MAX - left < avio_tell(s->pb))
+            return AVERROR_INVALIDDATA;
         wav->data_end = avio_tell(s->pb) + left;
     }