Log in Start free

Vulnerability · Published Mar 23, 2026 · Assigned by redhat

CVE-2026-1940Gstreamer: incomplete fix of cve-2026-1940

Medium 5.1

In plain English

A medium-severity out-of-bounds read in Red Hat Enterprise Linux 10 from Red Hat. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.2% (higher than 14% of all known vulnerabilities). Fixed versions are available - upgrade the affected package.

Severity (CVSS 3.1)5.1Medium
Exploit odds (30 days)0.2%top 85.7% of all CVEs
Exploited in the wildNo reportsCISA SSVC: none
Attack toolingNoneno public tooling known

Official description

An incomplete fix for CVE-2024-47778 allows an out-of-bounds read in gst_wavparse_adtl_chunk() function. The patch added a size validation check lsize + 8 > size, but it does not account for the GST_ROUND_UP_2(lsize) used in the actual offset calculation. When lsize is an odd number, the parser advances more bytes than validated, causing OOB read.

Affected packages & fixed versions

EcosystemPackageFixed inAdvisory
Debian:12gst-plugins-good1.01.22.0-5+deb12u4DEBIAN-CVE-2026-1940
Debian:13gst-plugins-good1.01.26.2-1+deb13u2DEBIAN-CVE-2026-1940
Debian:14gst-plugins-good1.01.28.1-1DEBIAN-CVE-2026-1940
Ubuntu:25.10gst-plugins-bad1.0no fix listedUBUNTU-CVE-2026-1940

Affected products (as reported)

VendorProductVersions
Red Hat Red Hat Enterprise Linux 10 see references
Red Hat Red Hat Enterprise Linux 6 see references
Red Hat Red Hat Enterprise Linux 7 see references
Red Hat Red Hat Enterprise Linux 7 see references
Red Hat Red Hat Enterprise Linux 8 see references
Red Hat Red Hat Enterprise Linux 8 see references
Red Hat Red Hat Enterprise Linux 9 see references

Weakness: CWE-125 · Vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L

References