Signal is active with 1 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
GStreamer is a library for constructing graphs of media-handling components. An OOB-read vulnerability has been discovered in gst_wavparse_adtl_chunk within gstwavparse.c. This vulnerability arises due to insufficient validation of the size parameter, which can exceed the bounds of the data buffer. As a result, an OOB read occurs in the following while loop. This vulnerability can result in reading up to 4GB of process memory or potentially causing a segmentation fault (SEGV) when accessing invalid memory. This vulnerability is fixed in 1.24.10.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
AVAILABLE
Momentum
NONE
If you run products in this scope, you should treat this CVE as relevant to your environment.
CVE-2026-1940 Out-of-Bounds Read Vulnerability in GStreamer WavParse Plugin via Incomplete CVE-2024-47778 Fix https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-1940
Post summary
CVE-2026-1940 is described as an out‑of‑bounds read vulnerability in GStreamer WavParse due to an incomplete CVE‑2024‑47778 fix, with no evidence of a PoC, exploitation, or mitigation in the text.
1 of 1 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| App | gstreamer | gstreamer | - | - | - |