Security Advisory 2026-0035 (CVE-2026-53705)

Details

Integer overflow vulnerabilities in the wavpackdec element (WavPack audio decoder) in gst-plugins-good when handling malformed WavPack audio files. The vulnerabilities occur during input buffer size validation and output buffer allocation size calculations, where insufficient bounds checking allows integer overflow during multiplication operations, leading to undersized buffer allocations. Additionally, incorrect variable types in size calculations and improper buffer unmap ordering in error paths contribute to the vulnerability.

Impact

A malicious third party could trigger a crash in the application, resulting in denial of service, when processing malicious WavPack audio files.

Solution

The gst-plugins-good 1.28.4 release addresses the issue. People using older versions of GStreamer should apply the patch and recompile.

References

The GStreamer project

• https://gstreamer.freedesktop.org

CVE Database Entries

• CVE-2026-53705

GStreamer 1.28.4 release

• Release Notes
• GStreamer Plugins Good 1.28.4

Patches

• Patch