CVE-2026-53705 is an integer overflow vulnerability in the gst_wavpack_dec_handle_frame() function of GStreamer's WavPack audio decoder (gst-plugins-good). The calculation 4 * block_samples * channels overflows 32-bit integers, resulting in a smaller-than-needed heap allocation. Subsequently, the WavPack library writes decoded audio samples beyond the allocated buffer, causing heap memory corruption. This affects both 32-bit and 64-bit architectures. A remote attacker can exploit this by convincing a user to open a malicious WavPack file, potentially causing denial of service or arbitrary code execution. Red Hat and Ubuntu have issued security advisories and released patched package versions to address this issue.

This vulnerability allows remote attackers to cause a denial of service via application crashes or potentially execute arbitrary code by processing crafted WavPack audio files. The heap buffer overflow due to integer overflow in buffer size calculation leads to memory corruption, which can be leveraged for code execution. Both confidentiality and integrity impacts are rated low, while availability impact is high. The CVSS v3.1 score is 7.6 (High).

Official patches are available from both Red Hat and Ubuntu. Red Hat has released updated gstreamer1-plugins-good packages (e.g., version 1.26.7-2.el10_2.1) for Red Hat Enterprise Linux 10 and related architectures. Ubuntu has released fixed package versions for Ubuntu 22.04 LTS, 24.04 LTS, and 26.04 LTS (e.g., gstreamer1.0-plugins-good 1.28.2-2ubuntu0.1). Users should apply these updates via their standard system update mechanisms to remediate the vulnerability. No additional mitigations are specified or required beyond applying these official fixes.