Security Advisory 2026-0035 (CVE-2026-53705)
| Summary | Integer overflow in WavPack decoder |
| Date | 2026-06-12 |
| Affected Versions | GStreamer gst-plugins-good < 1.28.4 |
| IDs | GStreamer-SA-2026-0035 CVE-2026-53705 |
Details
Integer overflow vulnerabilities in the wavpackdec element (WavPack audio decoder) in gst-plugins-good when handling malformed WavPack audio files. The vulnerabilities occur during input buffer size validation and output buffer allocation size calculations, where insufficient bounds checking allows integer overflow during multiplication operations, leading to undersized buffer allocations. Additionally, incorrect variable types in size calculations and improper buffer unmap ordering in error paths contribute to the vulnerability.
Impact
A malicious third party could trigger a crash in the application, resulting in denial of service, when processing malicious WavPack audio files.
Solution
The gst-plugins-good 1.28.4 release addresses the issue. People using older versions of GStreamer should apply the patch and recompile.