gstreamer1 vulnerabilities

CVEs whose affected-version data names the gstreamer1 package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.

1 CVERSS

CVE-2026-1940Medium· 5.1

7mo ago

Gstreamer: incomplete fix of cve-2026-1940

An incomplete fix for CVE-2024-47778 allows an out-of-bounds read in gst_wavparse_adtl_chunk() function. The patch added a size validation check lsize + 8 > size, but it does not account for the GST_ROUND_UP_2(lsize) used in the actual o…

▾ SunlitRed Hat · gstreamer1EPSS 0.23%via CVEORG