Summary
[1.16.1-7]
- Fix integer overflow vulnerabilities in wavpackdec (CVE-2026-53705)
Resolves: RHEL-184473
Fixed packages 2
| Release | Package | Fixed in |
|---|---|---|
| Oracle Linux · 8 | gstreamer1-plugins-good | 0:1.16.1-7.el8_10 |
| Oracle Linux · 8 | gstreamer1-plugins-good-gtk | 0:1.16.1-7.el8_10 |
Vulnerabilities 1
-
High 7.6
Gstreamer1-plugins-good: gstreamer: heap buffer overflow in wavpack decoder via integer overflow
A flaw was found in GStreamer's WavPack audio decoder in gst-plugins-good. When processing a specially crafted WavPack file, an integer overflow in the buffer size calculation (4 * block_samples * channels) in gst_wavpack_dec_handle_frame() causes a very smal…