Summary
[1.26.7-2.1]
- Fix integer overflow vulnerabilities in wavpack decoder (CVE-2026-53705)
Resolves: RHEL-184480
Fixed packages 2
| Release | Package | Fixed in |
|---|---|---|
| Oracle Linux · 10 | gstreamer1-plugins-good | 0:1.26.7-2.el10_2.1 |
| Oracle Linux · 10 | gstreamer1-plugins-good-gtk | 0:1.26.7-2.el10_2.1 |
Vulnerabilities 1
-
High 7.6
Gstreamer1-plugins-good: gstreamer: heap buffer overflow in wavpack decoder via integer overflow
A flaw was found in GStreamer's WavPack audio decoder in gst-plugins-good. When processing a specially crafted WavPack file, an integer overflow in the buffer size calculation (4 * block_samples * channels) in gst_wavpack_dec_handle_frame() causes a very smal…