1460 matches found
gstreamer: gstreamer1-plugins-bad-free: gstreamer: heap out-of-bounds write in adpcmdec IMA/DVI ADPCM decoder
A heap out-of-bounds write vulnerability was found in the GStreamer gst-plugins-bad adpcmdec element when decoding IMA/DVI ADPCM audio. Insufficient validation of the per-block sample count for multi-channel streams allows a crafted WAV file to cause writes beyond the allocated output buffer. Thi...
SUSE CVE-2026-19387
A heap out-of-bounds write vulnerability was found in the GStreamer gst-plugins-bad adpcmdec element when decoding IMA/DVI ADPCM audio. Insufficient validation of the per-block sample count for multi-channel streams allows a crafted WAV file to cause writes beyond the allocated output buffer. Thi...
Astra Linux – Vulnerability in taglib
TagLib before version 2.0 allows a segmentation violation and causes the application to crash during tag writing when a crafted WAV file is used, in which the id3 chunk is the only valid chunk...
CVE-2026-19387
A heap out-of-bounds write vulnerability was found in the GStreamer gst-plugins-bad adpcmdec element when decoding IMA/DVI ADPCM audio. Insufficient validation of the per-block sample count for multi-channel streams allows a crafted WAV file to cause writes beyond the allocated output buffer. Thi...
DEBIAN-CVE-2026-19387
A heap out-of-bounds write vulnerability was found in the GStreamer gst-plugins-bad adpcmdec element when decoding IMA/DVI ADPCM audio. Insufficient validation of the per-block sample count for multi-channel streams allows a crafted WAV file to cause writes beyond the allocated output buffer. Thi...
CVE-2026-19387 Gstreamer: gstreamer1-plugins-bad-free: gstreamer: heap out-of-bounds write in adpcmdec ima/dvi adpcm decoder
A heap out-of-bounds write vulnerability was found in the GStreamer gst-plugins-bad adpcmdec element when decoding IMA/DVI ADPCM audio. Insufficient validation of the per-block sample count for multi-channel streams allows a crafted WAV file to cause writes beyond the allocated output buffer. Thi...
EUVD-2026-54986
A heap out-of-bounds write vulnerability was found in the GStreamer gst-plugins-bad adpcmdec element when decoding IMA/DVI ADPCM audio. Insufficient validation of the per-block sample count for multi-channel streams allows a crafted WAV file to cause writes beyond the allocated output buffer. Thi...
CVE-2026-19387
A heap out-of-bounds write vulnerability was found in the GStreamer gst-plugins-bad adpcmdec element when decoding IMA/DVI ADPCM audio. Insufficient validation of the per-block sample count for multi-channel streams allows a crafted WAV file to cause writes beyond the allocated output buffer. Thi...
PT-2026-69329
Name of the Vulnerable Software and Affected Versions GStreamer gst-plugins-bad affected versions not specified Description A heap out-of-bounds write occurs in the adpcmdec element when decoding IMA/DVI ADPCM audio. This is caused by insufficient validation of the per-block sample count for...
CVE-2026-71261
drlibs drwav.h all versions through current master contains an integer overflow in W64 CUE chunk metadata parsing. In drwavmetadataprocesschunk, a stage-1 capacity estimate truncates the 64-bit W64 chunk sizeInBytes to sizet before dividing by DRWAVCUEPOINTBYTES; on 32-bit builds this truncation...
CVE-2026-71261
drlibs drwav.h all versions through current master contains an integer overflow in W64 CUE chunk metadata parsing. In drwavmetadataprocesschunk, a stage-1 capacity estimate truncates the 64-bit W64 chunk sizeInBytes to sizet before dividing by DRWAVCUEPOINTBYTES; on 32-bit builds this truncation...
CVE-2026-71261 dr_wav.h W64 CUE Chunk Metadata Parsing Integer Overflow Leading to Heap Buffer Overflow on 32-bit Builds
drlibs drwav.h all versions through current master contains an integer overflow in W64 CUE chunk metadata parsing. In drwavmetadataprocesschunk, a stage-1 capacity estimate truncates the 64-bit W64 chunk sizeInBytes to sizet before dividing by DRWAVCUEPOINTBYTES; on 32-bit builds this truncation...
EUVD-2026-53346
drlibs drwav.h all versions through current master contains an integer overflow in W64 CUE chunk metadata parsing. In drwavmetadataprocesschunk, a stage-1 capacity estimate truncates the 64-bit W64 chunk sizeInBytes to sizet before dividing by DRWAVCUEPOINTBYTES; on 32-bit builds this truncation...
CVE-2026-71261
CVE-2026-71261 (dr_libs dr_wav.h) : All versions up to current master are affected by an integer overflow in W64 CUE chunk metadata parsing. During drwav__metadata_process_chunk(), a stage-1 capacity estimate truncates the 64-bit sizeInBytes to size_t before dividing by DRWAV_CUE_POINT_BYTES. On ...
CVE-2026-51271
Rejected reason: DO NOT USE THIS CVE RECORD. ConsultIDs: none. Reason: This record was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: none...
CVE-2026-51271
DO NOT USE THIS CVE RECORD. ConsultIDs: none. Reason: This record was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: none...
PT-2026-65512
In schreibfaul1 ESP32-audioI2S 3.4.5, a heap-based buffer overflow vulnerability exists in the WAV header parsing function read WAV Header. The function reads untrusted chunk size and bytes-to-skip value directly from malicious WAV files without reasonable range restriction. Abnormally large bts...
CVE-2026-51271
In the provided documents, CVE-2026-51271 is linked to the schreibfaul1 ESP32-audioI2S 3.4.5 component. The reported vulnerability is a heap-based buffer overflow in the WAV header parsing function read_WAV_Header(). The function reads untrusted chunk size and bytes-to-skip values directly from m...
EUVD-2026-49892
In schreibfaul1 ESP32-audioI2S 3.4.5, a heap-based buffer overflow vulnerability exists in the WAV header parsing function readWAVHeader. The function reads untrusted chunk size and bytes-to-skip value directly from malicious WAV files without reasonable range restriction. Abnormally large bts an...