Patchwire CVEs, their patch status, and feeds to follow them

CVE-2026-53705

Fixed in a distro release EPSS <1%CVSS 7.6

A flaw was found in GStreamer's WavPack audio decoder in gst-plugins-good. When processing a specially crafted WavPack file, an integer overflow in the buffer size calculation (4 * block_samples * channels) in gst_wavpack_dec_handle_frame() causes a very small heap allocation. The WavPack library then writes decoded audio samples far beyond the allocated buffer, resulting in heap memory corruption. This affects both 32-bit and 64-bit systems since the arithmetic is performed in 32-bit integers before promotion to the allocation size type. A remote attacker could use this flaw to crash an application or potentially execute arbitrary code by convincing a user to open a malicious WavPack audio file.

Published 2026-06-15 · CVE record · OSV

Products: Red Hat Enterprise Linux 10, Red Hat Enterprise Linux 10.0 Extended Update Support, Red Hat Enterprise Linux 7 Extended Lifecycle Support, Red Hat Enterprise Linux 8, Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support, Red Hat Enterprise Linux 8.4 Extended Update Support Long-Life Add-On, Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support, Red Hat Enterprise Linux 8.6 Extended Update Support Long-Life Add-On, Red Hat Enterprise Linux 8.8 Telecommunications Update Service, Red Hat Enterprise Linux 8.8 Update Services for SAP Solutions, Red Hat Enterprise Linux 9, Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions, Red Hat Enterprise Linux 9.4 Update Services for SAP Solutions, Red Hat Enterprise Linux 9.6 Extended Update Support, Red Hat Enterprise Linux 7

Distro releases

ReleasePackageFixed in
AlmaLinux 10gstreamer1-plugins-good1.26.7-2.el10_2.1
AlmaLinux 10gstreamer1-plugins-good-gtk1.26.7-2.el10_2.1
AlmaLinux 8gstreamer1-plugins-good1.16.1-7.el8_10
AlmaLinux 8gstreamer1-plugins-good-gtk1.16.1-7.el8_10
AlmaLinux 9gstreamer1-plugins-good1.22.12-7.el9_8.1
AlmaLinux 9gstreamer1-plugins-good-gtk1.22.12-7.el9_8.1
Amazon Linux 2gstreamer-plugins-good0.10.31-20.amzn2.0.4
Amazon Linux 2gstreamer-plugins-good-devel-docs0.10.31-20.amzn2.0.4
Amazon Linux 2gstreamer1-plugins-good1.18.4-6.amzn2.0.12
Amazon Linux 2gstreamer1-plugins-good-gtk1.18.4-6.amzn2.0.12
Amazon Linux 2023gstreamer1-plugins-good1.24.10-1.amzn2023.0.7
Amazon Linux 2023gstreamer1-plugins-good-gtk1.24.10-1.amzn2023.0.7
Debian 12gst-plugins-good1.01.22.0-5+deb12u4
Debian 13gst-plugins-good1.0no fix
Debian 14gst-plugins-good1.01.28.4-1
Red Hat Enterprise Linux 10.2gstreamer1-plugins-good0:1.26.7-2.el10_2.1
Red Hat Enterprise Linux 10.2gstreamer1-plugins-good-debuginfo0:1.26.7-2.el10_2.1
Red Hat Enterprise Linux 10.2gstreamer1-plugins-good-debugsource0:1.26.7-2.el10_2.1
Red Hat Enterprise Linux 10.2gstreamer1-plugins-good-gtk0:1.26.7-2.el10_2.1
Red Hat Enterprise Linux 10.2gstreamer1-plugins-good-gtk-debuginfo0:1.26.7-2.el10_2.1
Red Hat Enterprise Linux 10.2gstreamer1-plugins-good-qt6-debuginfo0:1.26.7-2.el10_2.1
Red Hat Enterprise Linux 8gstreamer1-plugins-good0:1.16.1-7.el8_10
Red Hat Enterprise Linux 8gstreamer1-plugins-good-debuginfo0:1.16.1-7.el8_10
Red Hat Enterprise Linux 8gstreamer1-plugins-good-debugsource0:1.16.1-7.el8_10
Red Hat Enterprise Linux 8gstreamer1-plugins-good-gtk0:1.16.1-7.el8_10
Red Hat Enterprise Linux 8gstreamer1-plugins-good-gtk-debuginfo0:1.16.1-7.el8_10
Red Hat Enterprise Linux 9gstreamer1-plugins-good0:1.22.12-7.el9_8.1
Red Hat Enterprise Linux 9gstreamer1-plugins-good-debuginfo0:1.22.12-7.el9_8.1
Red Hat Enterprise Linux 9gstreamer1-plugins-good-debugsource0:1.22.12-7.el9_8.1
Red Hat Enterprise Linux 9gstreamer1-plugins-good-gtk0:1.22.12-7.el9_8.1
Red Hat Enterprise Linux 9gstreamer1-plugins-good-gtk-debuginfo0:1.22.12-7.el9_8.1
Red Hat Enterprise Linux 9gstreamer1-plugins-good-qt-debuginfo0:1.22.12-7.el9_8.1
Red Hat Enterprise Linux eus 10.0gstreamer1-plugins-good0:1.24.11-1.el10_0.3
Red Hat Enterprise Linux eus 10.0gstreamer1-plugins-good-debuginfo0:1.24.11-1.el10_0.3
Red Hat Enterprise Linux eus 10.0gstreamer1-plugins-good-debugsource0:1.24.11-1.el10_0.3
Red Hat Enterprise Linux eus 10.0gstreamer1-plugins-good-gtk0:1.24.11-1.el10_0.3
Red Hat Enterprise Linux eus 10.0gstreamer1-plugins-good-gtk-debuginfo0:1.24.11-1.el10_0.3
Red Hat Enterprise Linux eus 10.0gstreamer1-plugins-good-qt6-debuginfo0:1.24.11-1.el10_0.3
Red Hat rhel aus 8.4gstreamer1-plugins-good0:1.16.1-4.el8_4.1
Red Hat rhel aus 8.4gstreamer1-plugins-good-debuginfo0:1.16.1-4.el8_4.1
Red Hat rhel aus 8.4gstreamer1-plugins-good-debugsource0:1.16.1-4.el8_4.1
Red Hat rhel aus 8.4gstreamer1-plugins-good-gtk0:1.16.1-4.el8_4.1
Red Hat rhel aus 8.4gstreamer1-plugins-good-gtk-debuginfo0:1.16.1-4.el8_4.1
Red Hat rhel aus 8.6gstreamer1-plugins-good0:1.16.1-4.el8_6.1
Red Hat rhel aus 8.6gstreamer1-plugins-good-debuginfo0:1.16.1-4.el8_6.1
Red Hat rhel aus 8.6gstreamer1-plugins-good-debugsource0:1.16.1-4.el8_6.1
Red Hat rhel aus 8.6gstreamer1-plugins-good-gtk0:1.16.1-4.el8_6.1
Red Hat rhel aus 8.6gstreamer1-plugins-good-gtk-debuginfo0:1.16.1-4.el8_6.1
Red Hat rhel e4s 8.8gstreamer1-plugins-good0:1.16.1-5.el8_8.1
Red Hat rhel e4s 8.8gstreamer1-plugins-good-debuginfo0:1.16.1-5.el8_8.1
Red Hat rhel e4s 8.8gstreamer1-plugins-good-debugsource0:1.16.1-5.el8_8.1
Red Hat rhel e4s 8.8gstreamer1-plugins-good-gtk0:1.16.1-5.el8_8.1
Red Hat rhel e4s 8.8gstreamer1-plugins-good-gtk-debuginfo0:1.16.1-5.el8_8.1
Red Hat rhel e4s 9.2gstreamer1-plugins-good0:1.18.4-8.el9_2.1
Red Hat rhel e4s 9.2gstreamer1-plugins-good-debuginfo0:1.18.4-8.el9_2.1
Red Hat rhel e4s 9.2gstreamer1-plugins-good-debugsource0:1.18.4-8.el9_2.1
Red Hat rhel e4s 9.2gstreamer1-plugins-good-gtk0:1.18.4-8.el9_2.1
Red Hat rhel e4s 9.2gstreamer1-plugins-good-gtk-debuginfo0:1.18.4-8.el9_2.1
Red Hat rhel e4s 9.2gstreamer1-plugins-good-qt-debuginfo0:1.18.4-8.el9_2.1
Red Hat rhel e4s 9.4gstreamer1-plugins-good0:1.22.1-4.el9_4.1
Red Hat rhel e4s 9.4gstreamer1-plugins-good-debuginfo0:1.22.1-4.el9_4.1
Red Hat rhel e4s 9.4gstreamer1-plugins-good-debugsource0:1.22.1-4.el9_4.1
Red Hat rhel e4s 9.4gstreamer1-plugins-good-gtk0:1.22.1-4.el9_4.1
Red Hat rhel e4s 9.4gstreamer1-plugins-good-gtk-debuginfo0:1.22.1-4.el9_4.1
Red Hat rhel e4s 9.4gstreamer1-plugins-good-qt-debuginfo0:1.22.1-4.el9_4.1
Red Hat rhel els 7gstreamer1-plugins-good0:1.10.4-4.el7_9.1
Red Hat rhel els 7gstreamer1-plugins-good-debuginfo0:1.10.4-4.el7_9.1
Red Hat rhel eus 9.6gstreamer1-plugins-good0:1.22.12-5.el9_6.1
Red Hat rhel eus 9.6gstreamer1-plugins-good-debuginfo0:1.22.12-5.el9_6.1
Red Hat rhel eus 9.6gstreamer1-plugins-good-debugsource0:1.22.12-5.el9_6.1
Red Hat rhel eus 9.6gstreamer1-plugins-good-gtk0:1.22.12-5.el9_6.1
Red Hat rhel eus 9.6gstreamer1-plugins-good-gtk-debuginfo0:1.22.12-5.el9_6.1
Red Hat rhel eus 9.6gstreamer1-plugins-good-qt-debuginfo0:1.22.12-5.el9_6.1
Red Hat rhel eus long life 8.4gstreamer1-plugins-good0:1.16.1-4.el8_4.1
Red Hat rhel eus long life 8.4gstreamer1-plugins-good-debuginfo0:1.16.1-4.el8_4.1
Red Hat rhel eus long life 8.4gstreamer1-plugins-good-debugsource0:1.16.1-4.el8_4.1
Red Hat rhel eus long life 8.4gstreamer1-plugins-good-gtk0:1.16.1-4.el8_4.1
Red Hat rhel eus long life 8.4gstreamer1-plugins-good-gtk-debuginfo0:1.16.1-4.el8_4.1
Red Hat rhel eus long life 8.6gstreamer1-plugins-good0:1.16.1-4.el8_6.1
Red Hat rhel eus long life 8.6gstreamer1-plugins-good-debuginfo0:1.16.1-4.el8_6.1
Red Hat rhel eus long life 8.6gstreamer1-plugins-good-debugsource0:1.16.1-4.el8_6.1
Red Hat rhel eus long life 8.6gstreamer1-plugins-good-gtk0:1.16.1-4.el8_6.1
Red Hat rhel eus long life 8.6gstreamer1-plugins-good-gtk-debuginfo0:1.16.1-4.el8_6.1
Red Hat rhel tus 8.8gstreamer1-plugins-good0:1.16.1-5.el8_8.1
Red Hat rhel tus 8.8gstreamer1-plugins-good-debuginfo0:1.16.1-5.el8_8.1
Red Hat rhel tus 8.8gstreamer1-plugins-good-debugsource0:1.16.1-5.el8_8.1
Red Hat rhel tus 8.8gstreamer1-plugins-good-gtk0:1.16.1-5.el8_8.1
Red Hat rhel tus 8.8gstreamer1-plugins-good-gtk-debuginfo0:1.16.1-5.el8_8.1
Rocky Linux 10gstreamer1-plugins-good0:1.26.7-2.el10_2.1
Rocky Linux 8gstreamer1-plugins-good0:1.16.1-7.el8_10
Rocky Linux 9gstreamer1-plugins-good0:1.22.12-7.el9_8.1
SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOSgstreamer-plugins-good1.20.1-150400.3.17.1
SUSE Linux Enterprise High Performance Computing 15 SP4-LTSSgstreamer-plugins-good1.20.1-150400.3.17.1
SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOSgstreamer-plugins-good1.22.0-150500.4.13.1
SUSE Linux Enterprise High Performance Computing 15 SP5-LTSSgstreamer-plugins-good1.22.0-150500.4.13.1
SUSE Linux Enterprise Module for Basesystem 15 SP7gstreamer-plugins-good1.24.0-150600.3.10.1
SUSE Linux Enterprise Server 12 SP5-LTSSgstreamer-plugins-good1.8.3-16.19.1
SUSE Linux Enterprise Server 15 SP4-LTSSgstreamer-plugins-good1.20.1-150400.3.17.1
SUSE Linux Enterprise Server 15 SP5-LTSSgstreamer-plugins-good1.22.0-150500.4.13.1
SUSE Linux Enterprise Server 15 SP6-LTSSgstreamer-plugins-good1.24.0-150600.3.10.1
SUSE Linux Enterprise Server LTSS Extended Security 12 SP5gstreamer-plugins-good1.8.3-16.19.1
SUSE Linux Enterprise Server for SAP Applications 15 SP4gstreamer-plugins-good1.20.1-150400.3.17.1
SUSE Linux Enterprise Server for SAP Applications 15 SP5gstreamer-plugins-good1.22.0-150500.4.13.1
SUSE Linux Enterprise Server for SAP Applications 15 SP6gstreamer-plugins-good1.24.0-150600.3.10.1
SUSE Linux Enterprise Workstation Extension 15 SP7gstreamer-plugins-good1.24.0-150600.3.10.1
Ubuntu 22.04 LTSgst-plugins-good1.01.20.3-0ubuntu1.7
Ubuntu 24.04 LTSgst-plugins-good1.01.24.2-1ubuntu1.5
Ubuntu 25.10gst-plugins-good1.0no fix
Ubuntu 26.04 LTSgst-plugins-good1.01.28.2-2ubuntu0.1
Ubuntu Pro 16.04 LTSgst-plugins-good1.0no fix
Ubuntu Pro 18.04 LTSgst-plugins-good1.0no fix
Ubuntu Pro 20.04 LTSgst-plugins-good1.0no fix
openSUSE Leap 16.0gstreamer-plugins-good1.26.7-160000.2.1