REDHAT-BUG-2513015: High severity GStreamer gst-plugins-bad (adpcmdec) vulnerability
A flaw was found in GStreamer gst-plugins-bad (adpcmdec). The IMA/DVI ADPCM decoder validated the per-block sample count with (nsamples - channels) % 8 == 0, which does not ensure alignment with the decode loop that writes 8 channels samples per iteration. A crafted multi-channel IMA ADPCM WAV can pass this check and cause a heap out-of-bounds write of decoded sample values that are partially derived from attacker-controlled compressed audio data. The adpcmdec element is auto-plugged by decodebin/playbin, so processing untrusted media (players, thumbnailers, transcoders) can trigger the issue, resulting in application crash, denial of service, memory corruption, or potentially code execution. Fixed upstream in gst-plugins-bad 1.28.6 (GStreamer-SA-2026-0077).
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
GStreamer gst-plugins-bad (adpcmdec)to a version that resolves this vulnerability.Fixed in 1.28.6Patch GStreamer-SA-2026-0077 - Compensating control
Avoid processing untrusted media inputs with GStreamer decodebin/playbin (and any players, thumbnailers, or transcoders that may auto-plug the adpcmdec element) until gst-plugins-bad is upgraded to 1.28.6.
Event History
Frequently Asked Questions
What is the severity of REDHAT-BUG-2513015?
The severity of REDHAT-BUG-2513015 is classified as high with a score of 7.
How do I fix REDHAT-BUG-2513015?
To fix REDHAT-BUG-2513015, update to the latest version of GStreamer gst-plugins-bad that addresses this vulnerability.
What type of vulnerability is REDHAT-BUG-2513015?
REDHAT-BUG-2513015 is a flaw in the GStreamer IMA/DVI ADPCM decoder related to sample count validation.
Which software is affected by REDHAT-BUG-2513015?
The affected software for REDHAT-BUG-2513015 is GStreamer gst-plugins-bad (specifically the adpcmdec component).
What impact does REDHAT-BUG-2513015 have?
The impact of REDHAT-BUG-2513015 could include potential memory corruption leading to crashes or arbitrary code execution.