CVE-2026-17072

Name of the Vulnerable Software and Affected Versions GStreamer gst-plugins-good (affected versions not specified)

Description A heap-based out-of-bounds read of 4 bytes can occur when parsing FLAC audio stream headers embedded in a Matroska or WebM container file. This issue is triggered by a boundary check in the gst matroska parse flac stream headers() function that fails to account for the full size of the data being copied, allowing a read past the end of the allocated buffer. An attacker could exploit this by crafting a malicious Matroska or WebM file to potentially leak a small amount of adjacent heap memory.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.