GStreamer-SA-2026-0021
CVE Information
Details
An integer overflow in the WAV parser (wavparse) when handling malformed WAV files with cue chunks. The vulnerability occurs during buffer size validation when calculating the expected size for cue entries (ncues * 24), where insufficient bounds checking allows integer overflow during the multiplication operation.
Impact
A malicious third party could trigger a crash in the application, resulting in denial of service, when processing malicious WAV media files. Memory exhaustion may also occur during cue chunk parsing.
Solution
The gst-plugins-good 1.28.2 release addresses the issue. People using older versions of GStreamer should apply the patch and recompile.
https://gitlab.freedesktop.org/gstreamer/gstreamer/-/merge_requests/11247.patch