CVE-2026-1940

Published: Mar 23, 2026Modified: Jun 17, 2026

7.5

Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Exploitability: 3.9 / Impact: 3.6

Source: NVD

Description

An incomplete fix for CVE-2024-47778 allows an out-of-bounds read in gst_wavparse_adtl_chunk() function. The patch added a size validation check lsize + 8 > size, but it does not account for the GST_ROUND_UP_2(lsize) used in the actual offset calculation. When lsize is an odd number, the parser advances more bytes than validated, causing OOB read.

Affected (8)

Products: Debian: Debian Linux · Freedesktop: Gst Plugins Good · Gstreamer: Gstreamer · +1 more

Show all products

Debian: Debian Linux · Freedesktop: Gst Plugins Good · Gstreamer: Gstreamer · Redhat: Enterprise Linux

1 product

1 product

1 product

1 product

Configuration A

8 vulnerable

Vulnerable Software	Affected Versions
Debian Debian Linux	Version 11.0
Debian Debian Linux	Version 12.0
Freedesktop Gst Plugins Good	Version 1.0.0
Gstreamer Gstreamer	Before 1.28.1
Redhat Enterprise Linux	Version 10.0
Redhat Enterprise Linux	Version 7.0
Redhat Enterprise Linux	Version 8.0
Redhat Enterprise Linux	Version 9.0