REDHAT-BUG-2436932: Medium severity GStreamer wavparse vulnerability

Published Feb 4, 2026

Updated

An incomplete fix for CVE-2024-47778 allows an out-of-bounds read in gstwavparseadtlchunk() function. The patch added a size validation check lsize + 8 > size, but it does not account for the GSTROUNDUP2(lsize) used in the actual offset calculation. When lsize is an odd number, the parser advances more bytes than validated, causing OOB read.

Affected Software

1 affected component

GStreamer wavparse

Event History

Feb 4, 2026

Data Sourced

via Red Hat·09:35 PM

DescriptionSeverityAffected Software

Frequently Asked Questions

What is the severity of REDHAT-BUG-2436932?

The severity of REDHAT-BUG-2436932 is rated as medium with a score of 4.

What is the risk associated with REDHAT-BUG-2436932?

The risk associated with REDHAT-BUG-2436932 is considered moderate with a risk score of 19.

How does the incomplete fix in REDHAT-BUG-2436932 affect GStreamer?

The incomplete fix in REDHAT-BUG-2436932 allows an out-of-bounds read in the gst_wavparse_adtl_chunk() function.

How do I fix REDHAT-BUG-2436932?

To fix REDHAT-BUG-2436932, update GStreamer to the latest version that addresses this vulnerability.

What causes the vulnerability in REDHAT-BUG-2436932?

The vulnerability in REDHAT-BUG-2436932 is caused by a failure to properly account for the GST_ROUND_UP_2(lsize) during offset calculation.