GStreamer < 1.28.4 Multiple Vulnerabilities

high Nessus Plugin ID 326245

Synopsis

An application installed on the remote host is affected by multiple vulnerabilities.

Description

The version of GStreamer installed on the remote host is prior to 1.28.4. It is, therefore, affected by multiple vulnerabilities:

- Multiple vulnerabilities were found in the RealMedia demuxer (rmdemux) and RealAudio demuxer (rademux) elements in gst-plugins-ugly. The demuxers lacked proper bounds validation when parsing file headers, stream properties, and audio packets, allowing out-of-bounds reads beyond the boundaries of the provided data buffers. Additionally, the use of signed integer types for size and length parameters could lead to integer overflows during size calculations and index operations. A malicious third party could trigger out-of-bounds reads or integer overflows by providing a crafted RealMedia file, potentially resulting in a crash, denial of service, or information disclosure. (CVE-2026-53703, CVE-2026-53704)

- A flaw was found in GStreamer's WavPack audio decoder in gst-plugins-good. When processing a specially crafted WavPack file, an integer overflow in the buffer size calculation (4 * block_samples * channels) in gst_wavpack_dec_handle_frame() causes a very small heap allocation. The WavPack library then writes decoded audio samples far beyond the allocated buffer, resulting in heap memory corruption. This affects both 32-bit and 64-bit systems since the arithmetic is performed in 32-bit integers before promotion to the allocation size type. A remote attacker could use this flaw to crash an application or potentially execute arbitrary code by convincing a user to open a malicious WavPack audio file. (CVE-2026-53705)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

Solution

Upgrade to GStreamer version 1.28.4, or later.

Plugin Details

Severity: High

ID: 326245

File Name: gstreamer_1_28_4.nasl

Version: 1.1

Type: Local

Agent: windows, macosx, unix

Family: Misc.

Published: 7/10/2026

Updated: 7/10/2026

Supported Sensors: Nessus Agent, Nessus

Risk Information

VPR

Risk Factor: Low

Score: 3.9

Percentile: 52.81

CVSS v2

Risk Factor: High

Base Score: 9

Vector: CVSS2#AV:N/AC:L/Au:N/C:P/I:P/A:C

CVSS Score Source: CVE-2026-53705

CVSS v3

Risk Factor: High

Base Score: 7.6

Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:H

Vulnerability Information

CPE: cpe:/a:gstreamer:gstreamer

Patch Publication Date: 6/12/2026

Vulnerability Publication Date: 6/12/2026

Reference Information

CVE: CVE-2026-53703, CVE-2026-53704, CVE-2026-53705

IAVA: 2026-A-0673

Detections

Analytics