CVE-2026-53705 Details

A heap buffer overflow vulnerability has been identified in GStreamer's WavPack audio decoder, part of the gst-plugins-good package. This vulnerability arises from an integer overflow in the buffer size calculation within the function gst_wavpack_dec_handle_frame(). When the decoder processes a specially crafted WavPack file, the overflow leads to a significantly undersized heap allocation. The WavPack library then writes decoded audio samples well beyond this allocation, causing heap memory corruption. This issue affects both 32-bit and 64-bit systems, as the problematic arithmetic is conducted using 32-bit integers before being promoted to the allocation size type. A remote attacker could exploit this vulnerability to crash an application or potentially execute arbitrary code by persuading a user to open a malicious WavPack audio file.

Users can upgrade to GStreamer 1.28.4, where this vulnerability is expected to be fixed.