CyberRota Analysis
AI-GeneratedA heap out-of-bounds write vulnerability in the GStreamer gst-plugins-bad adpcmdec element affects the decoding of IMA/DVI ADPCM audio, allowing crafted WAV files to exploit insufficient validation of sample counts in multi-channel streams. This can result in application crashes, denial of service, memory corruption, or even arbitrary code execution when handling untrusted media. Organizations utilizing GStreamer for media processing should prioritize patching this vulnerability to mitigate potential security risks.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
A heap out-of-bounds write vulnerability was found in the GStreamer gst-plugins-bad adpcmdec element when decoding IMA/DVI ADPCM audio. Insufficient validation of the per-block sample count for multi-channel streams allows a crafted WAV file to cause writes beyond the allocated output buffer. This can lead to application crash, denial of service, memory corruption, or potentially arbitrary code execution when untrusted media is processed.