Skip to content

GStreamer-SA-2026-0021 on CTRL-OS 26.05

Aliases: GStreamer-SA-2026-0021

Packages: gst_all_1.gst-plugins-good

Status: In Progress

Advisory Information

Details

An integer overflow in the WAV parser (wavparse) when handling malformed WAV files with cue chunks. The vulnerability occurs during buffer size validation when calculating the expected size for cue entries (ncues * 24), where insufficient bounds checking allows integer overflow during the multiplication operation.

Impact

A malicious third party could trigger a crash in the application, resulting in denial of service, when processing malicious WAV media files. Memory exhaustion may also occur during cue chunk parsing.

Solution

The gst-plugins-good 1.28.2 release addresses the issue. People using older versions of GStreamer should apply the patch and recompile.

https://gitlab.freedesktop.org/gstreamer/gstreamer/-/merge_requests/11247.patch

Updates

2026-07-28 00:03 CEST

Metadata changes:

  • Status for package gst_all_1.gst-plugins-good: “In Progress” (43fbe88cf94797fbd0275bfce5a428ac2eae47df)

2026-07-10 01:11 CEST

Metadata changes:

  • Status for package gst_all_1.gst-plugins-good: “Plausible”

(Amended on: 2026-07-10 01:18 CEST)

2026-07-10 01:10 CEST

Metadata changes:

  • Status for package gst_all_1.gst-plugins-good: “New”