PT-2026-38025 · Bitnami · Java-Min
Published
2026-05-06
·
Updated
2026-05-06
None
No severity ratings or metrics are available. When they are, we'll update the corresponding info on the page.
GStreamer is a library for constructing graphs of media-handling components. An OOB-read has been discovered in gst wavparse cue chunk within gstwavparse.c. The vulnerability happens due to a discrepancy between the size of the data buffer and the size value provided to the function. This mismatch causes the comparison if (size < 4 + ncues * 24) to fail in some cases, allowing the subsequent loop to access beyond the bounds of the data buffer. The root cause of this discrepancy stems from a miscalculation when clipping the chunk size based on upstream data size. This vulnerability allows reading beyond the bounds of the data buffer, potentially leading to a crash (denial of service) or the leak of sensitive data. This vulnerability is fixed in 1.24.10.
Found an issue in the description? Have something to add? Feel free to write us 👾
Related Identifiers
Affected Products
Java-Min