https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T01:41:42.407295+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-277109 EUVD-2026-277109 2026-10-03T01:41:42.506679+00:00 EUVD-2026-277109 https://cve.radiocsirt.org/vuln/fkie_cve-2026-1940 fkie_cve-2026-1940 2026-10-03T01:41:42.506714+00:00

An incomplete fix for CVE-2024-47778 allows an out-of-bounds read in gst_wavparse_adtl_chunk() function. The patch added a size validation check lsize + 8 > size, but it does not account for the GST_ROUND_UP_2(lsize) used in the actual offset calculation. When lsize is an odd number, the parser advances more bytes than validated, causing OOB read.

 https://cve.radiocsirt.org/vuln/ghsa-9wvw-r6fm-6wwv GHSA-9wvw-r6fm-6wwv 2026-10-03T01:41:42.506747+00:00

An incomplete fix for CVE-2024-47778 allows an out-of-bounds read in gst_wavparse_adtl_chunk() function. The patch added a size validation check lsize + 8 > size, but it does not account for the GST_ROUND_UP_2(lsize) used in the actual offset calculation. When lsize is an odd number, the parser advances more bytes than validated, causing OOB read.

 https://cve.radiocsirt.org/vuln/oesa-2026-2146 OESA-2026-2146 — gstreamer1-plugins-good security update 2026-10-03T01:41:42.506765+00:00

Affected: openEuler:20.03-LTS-SP4: gstreamer1-plugins-good, openEuler:22.03-LTS-SP4: gstreamer1-plugins-good, openEuler:24.03-LTS: gstreamer1-plugins-good, openEuler:24.03-LTS-SP1: gstreamer1-plugins-good, openEuler:24.03-LTS-SP3: gstreamer1-plugins-good

Security Fix(es):

An incomplete fix for CVE-2024-47778 allows an out-of-bounds read in gst_wavparse_adtl_chunk() function. The patch added a size validation check lsize + 8 > size, but it does not account for the GST_ROUND_UP_2(lsize) used in the actual offset calculation. When lsize is an odd number, the parser advances more bytes than validated, causing OOB read.(CVE-2026-1940)

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2026-1940 UBUNTU-CVE-2026-1940 2026-10-03T01:41:42.506800+00:00

Affected: Ubuntu:Pro:14.04:LTS: gst-plugins-bad1.0, Ubuntu:Pro:16.04:LTS: gst-plugins-bad1.0, Ubuntu:Pro:18.04:LTS: gst-plugins-bad1.0, Ubuntu:Pro:20.04:LTS: gst-plugins-bad1.0, Ubuntu:Pro:22.04:LTS: gst-plugins-bad1.0, Ubuntu:Pro:24.04:LTS: gst-plugins-bad1.0, Ubuntu:25.10: gst-plugins-bad1.0

An incomplete fix for CVE-2024-47778 allows an out-of-bounds read in gst_wavparse_adtl_chunk() function. The patch added a size validation check lsize + 8 > size, but it does not account for the GST_ROUND_UP_2(lsize) used in the actual offset calculation. When lsize is an odd number, the parser advances more bytes than validated, causing OOB read.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2026-0525 WID-SEC-W-2026-0525 — GStreamer: Mehrere Schwachstellen 2026-10-03T01:41:42.506831+00:00

Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in GStreamer ausnutzen, um einen Denial-of-Service-Zustand zu verursachen, Speicherbeschädigungen durchzuführen und möglicherweise beliebigen Code auszuführen.