CVE-2026-53705— GStreamer gst-plugins-good 数字错误漏洞

Gstreamer1-plugins-good: gstreamer: heap buffer overflow in wavpack decoder via integer overflow

A flaw was found in GStreamer's WavPack audio decoder in gst-plugins-good. When processing a specially crafted WavPack file, an integer overflow in the buffer size calculation (4 * block_samples * channels) in gst_wavpack_dec_handle_frame() causes a very small heap allocation. The WavPack library then writes decoded audio samples far beyond the allocated buffer, resulting in heap memory corruption. This affects both 32-bit and 64-bit systems since the arithmetic is performed in 32-bit integers before promotion to the allocation size type. A remote attacker could use this flaw to crash an application or potentially execute arbitrary code by convincing a user to open a malicious WavPack audio file.

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:H

整数溢出或超界折返

GStreamer gst-plugins-good 数字错误漏洞

GStreamer gst-plugins-good是GStreamer组织的一个多媒体处理插件。 GStreamer gst-plugins-good存在数字错误漏洞，该漏洞源于GStreamer的WavPack音频解码器在gst_wavpack_dec_handle_frame()函数中缓冲区大小计算存在整数溢出，导致堆内存损坏，远程攻击者可通过诱使用户打开特制的WavPack音频文件导致应用程序崩溃或可能执行任意代码。

N/A

N/A