A heap out-of-bounds write vulnerability exists in the GStreamer gst-plugins-bad adpcmdec element when decoding IMA/DVI ADPCM audio due to insufficient validation of per-block sample counts in multi-channel streams. This flaw can lead to application crashes, denial of service, memory corruption, or potentially arbitrary code execution when processing untrusted media. The vulnerability affects gstreamer1-plugins-bad-free versions prior to 1.16.2-20.oe2203sp4. A security update fixing this issue is available.