Nixpkgs Security Tracker

Login with GitHub

Details of issue NIXPKGS-2026-0740

NIXPKGS-2026-0740
published on 24 Mar 2026
Permalink CVE-2026-1940
5.1 MEDIUM
  • CVSS version: 3.1
  • Attack vector (AV): LOCAL
  • Attack complexity (AC): LOW
  • Privileges required (PR): NONE
  • User interaction (UI): NONE
  • Scope (S): UNCHANGED
  • Confidentiality impact (C): NONE
  • Integrity impact (I): LOW
  • Availability impact (A): LOW
updated 15 hours ago by @LeSuisse Activity log
  • Created automatic suggestion 1 day ago
  • @LeSuisse removed
    8 packages
    • gst_all_1.gstreamermm
    • gst_all_1.gst-vaapi
    • ocamlPackages_latest.gstreamer
    • ocamlPackages.gstreamer
    • libsForQt5.phonon-backend-gstreamer
    • obs-studio-plugins.obs-gstreamer
    • plasma5Packages.phonon-backend-gstreamer
    • tests.pkg-config.defaultPkgConfigPackages."gstreamer-controller-1.0"
    15 hours ago
  • @LeSuisse accepted 15 hours ago
  • @LeSuisse published on GitHub 15 hours ago
Gstreamer: incomplete fix of cve-2026-1940

An incomplete fix for CVE-2024-47778 allows an out-of-bounds read in gst_wavparse_adtl_chunk() function. The patch added a size validation check lsize + 8 > size, but it does not account for the GST_ROUND_UP_2(lsize) used in the actual offset calculation. When lsize is an odd number, the parser advances more bytes than validated, causing OOB read.

References

Affected products

gstreamer
gstreamer1
mingw-gstreamer1

Matching in nixpkgs

Ignored packages (8)

Package maintainers

Advisory: https://gstreamer.freedesktop.org/security/sa-2026-0001.html