{
    "document": {
        "category": "csaf_base",
        "csaf_version": "2.0",
        "distribution": {
            "tlp": {
                "label": "WHITE"
            }
        },
        "lang": "en",
        "notes": [
            {
                "category": "legal_disclaimer",
                "text": "The Netherlands Cyber Security Center (henceforth: NCSC-NL) maintains this portal to enhance access to its information and vulnerabilities. The use of this information is subject to the following terms and conditions:\n\nThe vulnerabilities disclosed in this portal are gathered by NCSC-NL from a variety of open sources, which the user can retrieve from other platforms. NCSC-NL makes every reasonable effort to ensure that the content of this portal is kept up to date, and that it is accurate and complete. Nevertheless, NCSC-NL cannot entirely rule out the possibility of errors, and therefore cannot give any warranty in respect of its completeness, accuracy or real-time keeping up-to-date. NCSC-NL does not control nor guarantee the accuracy, relevance, timeliness or completeness of information obtained from these external sources. The vulnerabilities disclosed in this portal are intended solely for the convenience of professional parties to take appropriate measures to manage the risks posed to the cybersecurity. No rights can be derived from the information provided therein.\n\nNCSC-NL and the Kingdom of the Netherlands assume no legal liability or responsibility for any damage resulting from either the use or inability of use of the vulnerabilities disclosed in this portal. This includes damage resulting from the inaccuracy of incompleteness of the information contained in it.\nThe information on this page is subject to Dutch law. All disputes related to or arising from the use of this portal regarding the disclosure of vulnerabilities will be submitted to the competent court in The Hague. This choice of means also applies to the court in summary proceedings."
            }
        ],
        "publisher": {
            "category": "coordinator",
            "contact_details": "cert@ncsc.nl",
            "name": "National Cyber Security Centre",
            "namespace": "https://www.ncsc.nl/"
        },
        "title": "CVE-2026-1940",
        "tracking": {
            "current_release_date": "2026-04-01T14:13:58.897946Z",
            "generator": {
                "date": "2026-02-17T15:00:00Z",
                "engine": {
                    "name": "V.E.L.M.A",
                    "version": "1.7"
                }
            },
            "id": "CVE-2026-1940",
            "initial_release_date": "2026-02-26T11:05:31.449049Z",
            "revision_history": [
                {
                    "date": "2026-02-26T11:05:31.449049Z",
                    "number": "1",
                    "summary": "CVE created.| Source created.| CVE status created. (valid)| Products created (4).| References created (14)."
                },
                {
                    "date": "2026-02-26T11:05:34.104694Z",
                    "number": "2",
                    "summary": "NCSC Score created."
                },
                {
                    "date": "2026-03-10T18:43:17.106273Z",
                    "number": "3",
                    "summary": "Source created.| CVE status created. (valid)| Products connected (2)."
                },
                {
                    "date": "2026-03-10T18:43:19.903952Z",
                    "number": "4",
                    "summary": "NCSC Score updated."
                },
                {
                    "date": "2026-03-18T09:29:59.233651Z",
                    "number": "5",
                    "summary": "Products connected (1).| Product Identifiers created (1).| References created (1)."
                },
                {
                    "date": "2026-03-18T09:30:01.381864Z",
                    "number": "6",
                    "summary": "NCSC Score updated."
                },
                {
                    "date": "2026-03-22T12:43:38.459696Z",
                    "number": "7",
                    "summary": "Products connected (2).| Products removed (2)."
                },
                {
                    "date": "2026-03-22T12:43:46.799901Z",
                    "number": "8",
                    "summary": "NCSC Score updated."
                },
                {
                    "date": "2026-03-24T20:41:28.115982Z",
                    "number": "9",
                    "summary": "Source created.| CVE status created. (valid)| Description created for source.| CVSS created.| References created (5)."
                },
                {
                    "date": "2026-03-24T20:41:29.082318Z",
                    "number": "10",
                    "summary": "Source created.| CVE status created. (valid)| Description created for source.| CVSS created.| References created (5)."
                },
                {
                    "date": "2026-03-24T20:41:30.591761Z",
                    "number": "11",
                    "summary": "NCSC Score updated."
                },
                {
                    "date": "2026-03-24T20:44:04.813854Z",
                    "number": "12",
                    "summary": "Description created for source."
                },
                {
                    "date": "2026-03-24T20:49:20.095219Z",
                    "number": "13",
                    "summary": "CWES updated (1)."
                },
                {
                    "date": "2026-03-24T20:49:25.351314Z",
                    "number": "14",
                    "summary": "NCSC Score updated."
                },
                {
                    "date": "2026-03-24T20:50:12.228718Z",
                    "number": "15",
                    "summary": "CWES updated (1).| Unknown change."
                },
                {
                    "date": "2026-03-24T20:50:17.431340Z",
                    "number": "16",
                    "summary": "NCSC Score updated."
                },
                {
                    "date": "2026-03-24T22:08:20.714368Z",
                    "number": "17",
                    "summary": "Source connected.| CVE status created. (valid)| EPSS created."
                },
                {
                    "date": "2026-03-24T22:08:22.814115Z",
                    "number": "18",
                    "summary": "NCSC Score updated."
                },
                {
                    "date": "2026-03-25T10:14:42.357739Z",
                    "number": "19",
                    "summary": "Products connected (1).| Product Identifiers created (1).| References created (1)."
                },
                {
                    "date": "2026-03-25T10:14:44.469244Z",
                    "number": "20",
                    "summary": "NCSC Score updated."
                },
                {
                    "date": "2026-03-25T23:59:48.628802Z",
                    "number": "21",
                    "summary": "NCSC Score updated."
                },
                {
                    "date": "2026-03-26T22:44:34.532808Z",
                    "number": "22",
                    "summary": "Source created.| CVE status created. (valid)| Description created for source.| CVSS created.| Products created (75).| Product Identifiers created (68).| References created (3)."
                },
                {
                    "date": "2026-03-26T22:44:43.838548Z",
                    "number": "23",
                    "summary": "NCSC Score updated."
                },
                {
                    "date": "2026-03-30T11:12:02.774678Z",
                    "number": "24",
                    "summary": "Products connected (1).| Product Identifiers created (1).| References created (3)."
                },
                {
                    "date": "2026-03-30T11:12:05.322780Z",
                    "number": "25",
                    "summary": "NCSC Score updated."
                },
                {
                    "date": "2026-03-31T11:09:29.081951Z",
                    "number": "26",
                    "summary": "Products connected (1).| Product Identifiers created (1).| References created (2)."
                },
                {
                    "date": "2026-03-31T11:09:31.054516Z",
                    "number": "27",
                    "summary": "NCSC Score updated."
                },
                {
                    "date": "2026-04-01T14:13:41.393015Z",
                    "number": "28",
                    "summary": "Products connected (1).| Product Identifiers created (1).| References created (2)."
                },
                {
                    "date": "2026-04-01T14:13:53.175885Z",
                    "number": "29",
                    "summary": "NCSC Score updated."
                }
            ],
            "status": "interim",
            "version": "29"
        }
    },
    "product_tree": {
        "branches": [
            {
                "branches": [
                    {
                        "branches": [
                            {
                                "category": "product_version_range",
                                "name": "vers:unknown/unknown",
                                "product": {
                                    "name": "vers:unknown/unknown",
                                    "product_id": "CSAFPID-1295663",
                                    "product_identification_helper": {
                                        "cpe": "cpe:2.3:o:debian:debian_linux:11.0:*:*:*:*:*:*:*"
                                    }
                                }
                            }
                        ],
                        "category": "product_name",
                        "name": "Debian Linux"
                    },
                    {
                        "branches": [
                            {
                                "branches": [
                                    {
                                        "category": "product_version_range",
                                        "name": "vers:deb/unknown",
                                        "product": {
                                            "name": "vers:deb/unknown",
                                            "product_id": "CSAFPID-1436168"
                                        }
                                    }
                                ],
                                "category": "product_name",
                                "name": "gst-plugins-good1.0"
                            }
                        ],
                        "category": "product_family",
                        "name": "bookworm"
                    },
                    {
                        "branches": [
                            {
                                "branches": [
                                    {
                                        "category": "product_version_range",
                                        "name": "vers:deb/unknown",
                                        "product": {
                                            "name": "vers:deb/unknown",
                                            "product_id": "CSAFPID-1436169"
                                        }
                                    }
                                ],
                                "category": "product_name",
                                "name": "gst-plugins-good1.0"
                            }
                        ],
                        "category": "product_family",
                        "name": "bullseye"
                    }
                ],
                "category": "vendor",
                "name": "Debian"
            },
            {
                "branches": [
                    {
                        "branches": [
                            {
                                "category": "product_version_range",
                                "name": "vers:unknown/gst-plugins-bad <1.28.1",
                                "product": {
                                    "name": "vers:unknown/gst-plugins-bad <1.28.1",
                                    "product_id": "CSAFPID-5726737"
                                }
                            },
                            {
                                "category": "product_version_range",
                                "name": "vers:unknown/gst-plugins-base <1.28.1",
                                "product": {
                                    "name": "vers:unknown/gst-plugins-base <1.28.1",
                                    "product_id": "CSAFPID-5726739"
                                }
                            },
                            {
                                "category": "product_version_range",
                                "name": "vers:unknown/gst-plugins-good <1.28.1",
                                "product": {
                                    "name": "vers:unknown/gst-plugins-good <1.28.1",
                                    "product_id": "CSAFPID-5726736"
                                }
                            },
                            {
                                "category": "product_version_range",
                                "name": "vers:unknown/gst-plugins-ugly <1.28.1",
                                "product": {
                                    "name": "vers:unknown/gst-plugins-ugly <1.28.1",
                                    "product_id": "CSAFPID-5726738"
                                }
                            }
                        ],
                        "category": "product_name",
                        "name": "GStreamer"
                    }
                ],
                "category": "vendor",
                "name": "Open Source"
            },
            {
                "branches": [
                    {
                        "branches": [
                            {
                                "category": "product_version_range",
                                "name": "vers:unknown/unknown",
                                "product": {
                                    "name": "vers:unknown/unknown",
                                    "product_id": "CSAFPID-1317175",
                                    "product_identification_helper": {
                                        "cpe": "cpe:/o:redhat:enterprise_linux:5::server"
                                    }
                                }
                            }
                        ],
                        "category": "product_name",
                        "name": "Red Hat Enterprise Linux"
                    }
                ],
                "category": "vendor",
                "name": "Red Hat"
            },
            {
                "branches": [
                    {
                        "branches": [
                            {
                                "category": "product_version_range",
                                "name": "vers:unknown/unknown",
                                "product": {
                                    "name": "vers:unknown/unknown",
                                    "product_id": "CSAFPID-1317176",
                                    "product_identification_helper": {
                                        "cpe": "cpe:/o:suse:opensuse:-"
                                    }
                                }
                            }
                        ],
                        "category": "product_name",
                        "name": "SUSE openSUSE"
                    },
                    {
                        "branches": [
                            {
                                "category": "product_version_range",
                                "name": "vers:unknown/unknown",
                                "product": {
                                    "name": "vers:unknown/unknown",
                                    "product_id": "CSAFPID-1317174",
                                    "product_identification_helper": {
                                        "cpe": "cpe:/o:suse:suse_linux:-"
                                    }
                                }
                            }
                        ],
                        "category": "product_name",
                        "name": "SuSE Linux"
                    }
                ],
                "category": "vendor",
                "name": "SUSE"
            },
            {
                "branches": [
                    {
                        "branches": [
                            {
                                "category": "product_version_range",
                                "name": "vers:unknown/unknown",
                                "product": {
                                    "name": "vers:unknown/unknown",
                                    "product_id": "CSAFPID-1330299",
                                    "product_identification_helper": {
                                        "cpe": "cpe:/o:canonical:ubuntu_linux:-"
                                    }
                                }
                            }
                        ],
                        "category": "product_name",
                        "name": "Ubuntu Linux"
                    },
                    {
                        "branches": [
                            {
                                "branches": [
                                    {
                                        "category": "product_version_range",
                                        "name": "vers:unknown/1.2.0-3ubuntu5",
                                        "product": {
                                            "name": "vers:unknown/1.2.0-3ubuntu5",
                                            "product_id": "CSAFPID-5919357",
                                            "product_identification_helper": {
                                                "purl": "pkg:deb/ubuntu/gst-plugins-bad1.0@1.2.0-3ubuntu5?arch=source&distro=trusty"
                                            }
                                        }
                                    },
                                    {
                                        "category": "product_version_range",
                                        "name": "vers:unknown/1.2.1-1ubuntu1",
                                        "product": {
                                            "name": "vers:unknown/1.2.1-1ubuntu1",
                                            "product_id": "CSAFPID-5919358",
                                            "product_identification_helper": {
                                                "purl": "pkg:deb/ubuntu/gst-plugins-bad1.0@1.2.1-1ubuntu1?arch=source&distro=trusty"
                                            }
                                        }
                                    },
                                    {
                                        "category": "product_version_range",
                                        "name": "vers:unknown/1.2.1-1ubuntu2",
                                        "product": {
                                            "name": "vers:unknown/1.2.1-1ubuntu2",
                                            "product_id": "CSAFPID-5919359",
                                            "product_identification_helper": {
                                                "purl": "pkg:deb/ubuntu/gst-plugins-bad1.0@1.2.1-1ubuntu2?arch=source&distro=trusty"
                                            }
                                        }
                                    },
                                    {
                                        "category": "product_version_range",
                                        "name": "vers:unknown/1.2.2-1ubuntu1",
                                        "product": {
                                            "name": "vers:unknown/1.2.2-1ubuntu1",
                                            "product_id": "CSAFPID-5919360",
                                            "product_identification_helper": {
                                                "purl": "pkg:deb/ubuntu/gst-plugins-bad1.0@1.2.2-1ubuntu1?arch=source&distro=trusty"
                                            }
                                        }
                                    },
                                    {
                                        "category": "product_version_range",
                                        "name": "vers:unknown/1.2.2-1ubuntu2",
                                        "product": {
                                            "name": "vers:unknown/1.2.2-1ubuntu2",
                                            "product_id": "CSAFPID-5919361",
                                            "product_identification_helper": {
                                                "purl": "pkg:deb/ubuntu/gst-plugins-bad1.0@1.2.2-1ubuntu2?arch=source&distro=trusty"
                                            }
                                        }
                                    },
                                    {
                                        "category": "product_version_range",
                                        "name": "vers:unknown/1.2.2-1ubuntu4",
                                        "product": {
                                            "name": "vers:unknown/1.2.2-1ubuntu4",
                                            "product_id": "CSAFPID-5919362",
                                            "product_identification_helper": {
                                                "purl": "pkg:deb/ubuntu/gst-plugins-bad1.0@1.2.2-1ubuntu4?arch=source&distro=trusty"
                                            }
                                        }
                                    },
                                    {
                                        "category": "product_version_range",
                                        "name": "vers:unknown/1.2.3-1ubuntu1",
                                        "product": {
                                            "name": "vers:unknown/1.2.3-1ubuntu1",
                                            "product_id": "CSAFPID-5919363",
                                            "product_identification_helper": {
                                                "purl": "pkg:deb/ubuntu/gst-plugins-bad1.0@1.2.3-1ubuntu1?arch=source&distro=trusty"
                                            }
                                        }
                                    },
                                    {
                                        "category": "product_version_range",
                                        "name": "vers:unknown/1.2.3-1ubuntu2",
                                        "product": {
                                            "name": "vers:unknown/1.2.3-1ubuntu2",
                                            "product_id": "CSAFPID-5919364",
                                            "product_identification_helper": {
                                                "purl": "pkg:deb/ubuntu/gst-plugins-bad1.0@1.2.3-1ubuntu2?arch=source&distro=trusty"
                                            }
                                        }
                                    },
                                    {
                                        "category": "product_version_range",
                                        "name": "vers:unknown/1.2.4-1~ubuntu1",
                                        "product": {
                                            "name": "vers:unknown/1.2.4-1~ubuntu1",
                                            "product_id": "CSAFPID-5919365",
                                            "product_identification_helper": {
                                                "purl": "pkg:deb/ubuntu/gst-plugins-bad1.0@1.2.4-1~ubuntu1?arch=source&distro=trusty"
                                            }
                                        }
                                    },
                                    {
                                        "category": "product_version_range",
                                        "name": "vers:unknown/1.2.4-1~ubuntu1.1",
                                        "product": {
                                            "name": "vers:unknown/1.2.4-1~ubuntu1.1",
                                            "product_id": "CSAFPID-5919366",
                                            "product_identification_helper": {
                                                "purl": "pkg:deb/ubuntu/gst-plugins-bad1.0@1.2.4-1~ubuntu1.1?arch=source&distro=trusty"
                                            }
                                        }
                                    },
                                    {
                                        "category": "product_version_range",
                                        "name": "vers:unknown/>=0",
                                        "product": {
                                            "name": "vers:unknown/>=0",
                                            "product_id": "CSAFPID-5919367"
                                        }
                                    }
                                ],
                                "category": "product_name",
                                "name": "gst-plugins-bad1.0"
                            }
                        ],
                        "category": "product_family",
                        "name": "Ubuntu:14.04:LTS"
                    },
                    {
                        "branches": [
                            {
                                "branches": [
                                    {
                                        "category": "product_version_range",
                                        "name": "vers:unknown/1.6.0-1ubuntu1",
                                        "product": {
                                            "name": "vers:unknown/1.6.0-1ubuntu1",
                                            "product_id": "CSAFPID-5919368",
                                            "product_identification_helper": {
                                                "purl": "pkg:deb/ubuntu/gst-plugins-bad1.0@1.6.0-1ubuntu1?arch=source&distro=xenial"
                                            }
                                        }
                                    },
                                    {
                                        "category": "product_version_range",
                                        "name": "vers:unknown/1.6.1-1ubuntu1",
                                        "product": {
                                            "name": "vers:unknown/1.6.1-1ubuntu1",
                                            "product_id": "CSAFPID-5919369",
                                            "product_identification_helper": {
                                                "purl": "pkg:deb/ubuntu/gst-plugins-bad1.0@1.6.1-1ubuntu1?arch=source&distro=xenial"
                                            }
                                        }
                                    },
                                    {
                                        "category": "product_version_range",
                                        "name": "vers:unknown/1.6.2-1ubuntu1",
                                        "product": {
                                            "name": "vers:unknown/1.6.2-1ubuntu1",
                                            "product_id": "CSAFPID-5919370",
                                            "product_identification_helper": {
                                                "purl": "pkg:deb/ubuntu/gst-plugins-bad1.0@1.6.2-1ubuntu1?arch=source&distro=xenial"
                                            }
                                        }
                                    },
                                    {
                                        "category": "product_version_range",
                                        "name": "vers:unknown/1.7.1-1ubuntu1",
                                        "product": {
                                            "name": "vers:unknown/1.7.1-1ubuntu1",
                                            "product_id": "CSAFPID-5919371",
                                            "product_identification_helper": {
                                                "purl": "pkg:deb/ubuntu/gst-plugins-bad1.0@1.7.1-1ubuntu1?arch=source&distro=xenial"
                                            }
                                        }
                                    },
                                    {
                                        "category": "product_version_range",
                                        "name": "vers:unknown/1.7.1-1ubuntu3",
                                        "product": {
                                            "name": "vers:unknown/1.7.1-1ubuntu3",
                                            "product_id": "CSAFPID-5919372",
                                            "product_identification_helper": {
                                                "purl": "pkg:deb/ubuntu/gst-plugins-bad1.0@1.7.1-1ubuntu3?arch=source&distro=xenial"
                                            }
                                        }
                                    },
                                    {
                                        "category": "product_version_range",
                                        "name": "vers:unknown/1.7.1-1ubuntu4",
                                        "product": {
                                            "name": "vers:unknown/1.7.1-1ubuntu4",
                                            "product_id": "CSAFPID-5919373",
                                            "product_identification_helper": {
                                                "purl": "pkg:deb/ubuntu/gst-plugins-bad1.0@1.7.1-1ubuntu4?arch=source&distro=xenial"
                                            }
                                        }
                                    },
                                    {
                                        "category": "product_version_range",
                                        "name": "vers:unknown/1.7.2-1ubuntu1",
                                        "product": {
                                            "name": "vers:unknown/1.7.2-1ubuntu1",
                                            "product_id": "CSAFPID-5919374",
                                            "product_identification_helper": {
                                                "purl": "pkg:deb/ubuntu/gst-plugins-bad1.0@1.7.2-1ubuntu1?arch=source&distro=xenial"
                                            }
                                        }
                                    },
                                    {
                                        "category": "product_version_range",
                                        "name": "vers:unknown/1.7.90-1ubuntu2",
                                        "product": {
                                            "name": "vers:unknown/1.7.90-1ubuntu2",
                                            "product_id": "CSAFPID-5919375",
                                            "product_identification_helper": {
                                                "purl": "pkg:deb/ubuntu/gst-plugins-bad1.0@1.7.90-1ubuntu2?arch=source&distro=xenial"
                                            }
                                        }
                                    },
                                    {
                                        "category": "product_version_range",
                                        "name": "vers:unknown/1.7.91-1ubuntu1",
                                        "product": {
                                            "name": "vers:unknown/1.7.91-1ubuntu1",
                                            "product_id": "CSAFPID-5919376",
                                            "product_identification_helper": {
                                                "purl": "pkg:deb/ubuntu/gst-plugins-bad1.0@1.7.91-1ubuntu1?arch=source&distro=xenial"
                                            }
                                        }
                                    },
                                    {
                                        "category": "product_version_range",
                                        "name": "vers:unknown/1.8.0-1ubuntu1",
                                        "product": {
                                            "name": "vers:unknown/1.8.0-1ubuntu1",
                                            "product_id": "CSAFPID-5919377",
                                            "product_identification_helper": {
                                                "purl": "pkg:deb/ubuntu/gst-plugins-bad1.0@1.8.0-1ubuntu1?arch=source&distro=xenial"
                                            }
                                        }
                                    },
                                    {
                                        "category": "product_version_range",
                                        "name": "vers:unknown/1.8.1-1ubuntu0.1",
                                        "product": {
                                            "name": "vers:unknown/1.8.1-1ubuntu0.1",
                                            "product_id": "CSAFPID-5919378",
                                            "product_identification_helper": {
                                                "purl": "pkg:deb/ubuntu/gst-plugins-bad1.0@1.8.1-1ubuntu0.1?arch=source&distro=xenial"
                                            }
                                        }
                                    },
                                    {
                                        "category": "product_version_range",
                                        "name": "vers:unknown/1.8.2-1ubuntu0.1",
                                        "product": {
                                            "name": "vers:unknown/1.8.2-1ubuntu0.1",
                                            "product_id": "CSAFPID-5919379",
                                            "product_identification_helper": {
                                                "purl": "pkg:deb/ubuntu/gst-plugins-bad1.0@1.8.2-1ubuntu0.1?arch=source&distro=xenial"
                                            }
                                        }
                                    },
                                    {
                                        "category": "product_version_range",
                                        "name": "vers:unknown/1.8.2-1ubuntu0.2",
                                        "product": {
                                            "name": "vers:unknown/1.8.2-1ubuntu0.2",
                                            "product_id": "CSAFPID-5919380",
                                            "product_identification_helper": {
                                                "purl": "pkg:deb/ubuntu/gst-plugins-bad1.0@1.8.2-1ubuntu0.2?arch=source&distro=xenial"
                                            }
                                        }
                                    },
                                    {
                                        "category": "product_version_range",
                                        "name": "vers:unknown/1.8.3-1ubuntu0.2",
                                        "product": {
                                            "name": "vers:unknown/1.8.3-1ubuntu0.2",
                                            "product_id": "CSAFPID-5919381",
                                            "product_identification_helper": {
                                                "purl": "pkg:deb/ubuntu/gst-plugins-bad1.0@1.8.3-1ubuntu0.2?arch=source&distro=xenial"
                                            }
                                        }
                                    },
                                    {
                                        "category": "product_version_range",
                                        "name": "vers:unknown/>=0",
                                        "product": {
                                            "name": "vers:unknown/>=0",
                                            "product_id": "CSAFPID-5919382"
                                        }
                                    }
                                ],
                                "category": "product_name",
                                "name": "gst-plugins-bad1.0"
                            }
                        ],
                        "category": "product_family",
                        "name": "Ubuntu:16.04:LTS"
                    },
                    {
                        "branches": [
                            {
                                "branches": [
                                    {
                                        "category": "product_version_range",
                                        "name": "vers:unknown/1.12.3-1ubuntu1",
                                        "product": {
                                            "name": "vers:unknown/1.12.3-1ubuntu1",
                                            "product_id": "CSAFPID-5919383",
                                            "product_identification_helper": {
                                                "purl": "pkg:deb/ubuntu/gst-plugins-bad1.0@1.12.3-1ubuntu1?arch=source&distro=bionic"
                                            }
                                        }
                                    },
                                    {
                                        "category": "product_version_range",
                                        "name": "vers:unknown/1.12.3-1ubuntu2",
                                        "product": {
                                            "name": "vers:unknown/1.12.3-1ubuntu2",
                                            "product_id": "CSAFPID-5919384",
                                            "product_identification_helper": {
                                                "purl": "pkg:deb/ubuntu/gst-plugins-bad1.0@1.12.3-1ubuntu2?arch=source&distro=bionic"
                                            }
                                        }
                                    },
                                    {
                                        "category": "product_version_range",
                                        "name": "vers:unknown/1.12.3-2ubuntu1",
                                        "product": {
                                            "name": "vers:unknown/1.12.3-2ubuntu1",
                                            "product_id": "CSAFPID-5919385",
                                            "product_identification_helper": {
                                                "purl": "pkg:deb/ubuntu/gst-plugins-bad1.0@1.12.3-2ubuntu1?arch=source&distro=bionic"
                                            }
                                        }
                                    },
                                    {
                                        "category": "product_version_range",
                                        "name": "vers:unknown/1.12.4-2ubuntu1",
                                        "product": {
                                            "name": "vers:unknown/1.12.4-2ubuntu1",
                                            "product_id": "CSAFPID-5919386",
                                            "product_identification_helper": {
                                                "purl": "pkg:deb/ubuntu/gst-plugins-bad1.0@1.12.4-2ubuntu1?arch=source&distro=bionic"
                                            }
                                        }
                                    },
                                    {
                                        "category": "product_version_range",
                                        "name": "vers:unknown/1.12.4-2ubuntu2",
                                        "product": {
                                            "name": "vers:unknown/1.12.4-2ubuntu2",
                                            "product_id": "CSAFPID-5919387",
                                            "product_identification_helper": {
                                                "purl": "pkg:deb/ubuntu/gst-plugins-bad1.0@1.12.4-2ubuntu2?arch=source&distro=bionic"
                                            }
                                        }
                                    },
                                    {
                                        "category": "product_version_range",
                                        "name": "vers:unknown/1.13.1-1ubuntu1",
                                        "product": {
                                            "name": "vers:unknown/1.13.1-1ubuntu1",
                                            "product_id": "CSAFPID-5919388",
                                            "product_identification_helper": {
                                                "purl": "pkg:deb/ubuntu/gst-plugins-bad1.0@1.13.1-1ubuntu1?arch=source&distro=bionic"
                                            }
                                        }
                                    },
                                    {
                                        "category": "product_version_range",
                                        "name": "vers:unknown/1.13.91-1ubuntu1",
                                        "product": {
                                            "name": "vers:unknown/1.13.91-1ubuntu1",
                                            "product_id": "CSAFPID-5919389",
                                            "product_identification_helper": {
                                                "purl": "pkg:deb/ubuntu/gst-plugins-bad1.0@1.13.91-1ubuntu1?arch=source&distro=bionic"
                                            }
                                        }
                                    },
                                    {
                                        "category": "product_version_range",
                                        "name": "vers:unknown/1.14.0-1ubuntu1",
                                        "product": {
                                            "name": "vers:unknown/1.14.0-1ubuntu1",
                                            "product_id": "CSAFPID-5919390",
                                            "product_identification_helper": {
                                                "purl": "pkg:deb/ubuntu/gst-plugins-bad1.0@1.14.0-1ubuntu1?arch=source&distro=bionic"
                                            }
                                        }
                                    },
                                    {
                                        "category": "product_version_range",
                                        "name": "vers:unknown/1.14.1-1ubuntu1~ubuntu18.04.1",
                                        "product": {
                                            "name": "vers:unknown/1.14.1-1ubuntu1~ubuntu18.04.1",
                                            "product_id": "CSAFPID-5919391",
                                            "product_identification_helper": {
                                                "purl": "pkg:deb/ubuntu/gst-plugins-bad1.0@1.14.1-1ubuntu1~ubuntu18.04.1?arch=source&distro=bionic"
                                            }
                                        }
                                    },
                                    {
                                        "category": "product_version_range",
                                        "name": "vers:unknown/1.14.4-1ubuntu1~ubuntu18.04.1",
                                        "product": {
                                            "name": "vers:unknown/1.14.4-1ubuntu1~ubuntu18.04.1",
                                            "product_id": "CSAFPID-5919392",
                                            "product_identification_helper": {
                                                "purl": "pkg:deb/ubuntu/gst-plugins-bad1.0@1.14.4-1ubuntu1~ubuntu18.04.1?arch=source&distro=bionic"
                                            }
                                        }
                                    },
                                    {
                                        "category": "product_version_range",
                                        "name": "vers:unknown/1.14.5-0ubuntu1~18.04.1",
                                        "product": {
                                            "name": "vers:unknown/1.14.5-0ubuntu1~18.04.1",
                                            "product_id": "CSAFPID-5919393",
                                            "product_identification_helper": {
                                                "purl": "pkg:deb/ubuntu/gst-plugins-bad1.0@1.14.5-0ubuntu1~18.04.1?arch=source&distro=bionic"
                                            }
                                        }
                                    },
                                    {
                                        "category": "product_version_range",
                                        "name": "vers:unknown/>=0",
                                        "product": {
                                            "name": "vers:unknown/>=0",
                                            "product_id": "CSAFPID-5919394"
                                        }
                                    }
                                ],
                                "category": "product_name",
                                "name": "gst-plugins-bad1.0"
                            }
                        ],
                        "category": "product_family",
                        "name": "Ubuntu:18.04:LTS"
                    },
                    {
                        "branches": [
                            {
                                "branches": [
                                    {
                                        "category": "product_version_range",
                                        "name": "vers:unknown/1.26.0-1ubuntu2",
                                        "product": {
                                            "name": "vers:unknown/1.26.0-1ubuntu2",
                                            "product_id": "CSAFPID-5919426",
                                            "product_identification_helper": {
                                                "purl": "pkg:deb/ubuntu/gst-plugins-bad1.0@1.26.0-1ubuntu2?arch=source&distro=questing"
                                            }
                                        }
                                    },
                                    {
                                        "category": "product_version_range",
                                        "name": "vers:unknown/1.26.2-1ubuntu1",
                                        "product": {
                                            "name": "vers:unknown/1.26.2-1ubuntu1",
                                            "product_id": "CSAFPID-5919427",
                                            "product_identification_helper": {
                                                "purl": "pkg:deb/ubuntu/gst-plugins-bad1.0@1.26.2-1ubuntu1?arch=source&distro=questing"
                                            }
                                        }
                                    },
                                    {
                                        "category": "product_version_range",
                                        "name": "vers:unknown/1.26.3-1ubuntu1",
                                        "product": {
                                            "name": "vers:unknown/1.26.3-1ubuntu1",
                                            "product_id": "CSAFPID-5919428",
                                            "product_identification_helper": {
                                                "purl": "pkg:deb/ubuntu/gst-plugins-bad1.0@1.26.3-1ubuntu1?arch=source&distro=questing"
                                            }
                                        }
                                    },
                                    {
                                        "category": "product_version_range",
                                        "name": "vers:unknown/1.26.4-1ubuntu1",
                                        "product": {
                                            "name": "vers:unknown/1.26.4-1ubuntu1",
                                            "product_id": "CSAFPID-5919429",
                                            "product_identification_helper": {
                                                "purl": "pkg:deb/ubuntu/gst-plugins-bad1.0@1.26.4-1ubuntu1?arch=source&distro=questing"
                                            }
                                        }
                                    },
                                    {
                                        "category": "product_version_range",
                                        "name": "vers:unknown/1.26.5-1ubuntu2",
                                        "product": {
                                            "name": "vers:unknown/1.26.5-1ubuntu2",
                                            "product_id": "CSAFPID-5919430",
                                            "product_identification_helper": {
                                                "purl": "pkg:deb/ubuntu/gst-plugins-bad1.0@1.26.5-1ubuntu2?arch=source&distro=questing"
                                            }
                                        }
                                    },
                                    {
                                        "category": "product_version_range",
                                        "name": "vers:unknown/>=0",
                                        "product": {
                                            "name": "vers:unknown/>=0",
                                            "product_id": "CSAFPID-5919431"
                                        }
                                    }
                                ],
                                "category": "product_name",
                                "name": "gst-plugins-bad1.0"
                            }
                        ],
                        "category": "product_family",
                        "name": "Ubuntu:25.10"
                    },
                    {
                        "branches": [
                            {
                                "branches": [
                                    {
                                        "category": "product_version_range",
                                        "name": "vers:unknown/1.16.1-1ubuntu1",
                                        "product": {
                                            "name": "vers:unknown/1.16.1-1ubuntu1",
                                            "product_id": "CSAFPID-5919395",
                                            "product_identification_helper": {
                                                "purl": "pkg:deb/ubuntu/gst-plugins-bad1.0@1.16.1-1ubuntu1?arch=source&distro=esm-apps/focal"
                                            }
                                        }
                                    },
                                    {
                                        "category": "product_version_range",
                                        "name": "vers:unknown/1.16.1-1ubuntu3",
                                        "product": {
                                            "name": "vers:unknown/1.16.1-1ubuntu3",
                                            "product_id": "CSAFPID-5919396",
                                            "product_identification_helper": {
                                                "purl": "pkg:deb/ubuntu/gst-plugins-bad1.0@1.16.1-1ubuntu3?arch=source&distro=esm-apps/focal"
                                            }
                                        }
                                    },
                                    {
                                        "category": "product_version_range",
                                        "name": "vers:unknown/1.16.1-1ubuntu4",
                                        "product": {
                                            "name": "vers:unknown/1.16.1-1ubuntu4",
                                            "product_id": "CSAFPID-5919397",
                                            "product_identification_helper": {
                                                "purl": "pkg:deb/ubuntu/gst-plugins-bad1.0@1.16.1-1ubuntu4?arch=source&distro=esm-apps/focal"
                                            }
                                        }
                                    },
                                    {
                                        "category": "product_version_range",
                                        "name": "vers:unknown/1.16.1-1ubuntu5",
                                        "product": {
                                            "name": "vers:unknown/1.16.1-1ubuntu5",
                                            "product_id": "CSAFPID-5919398",
                                            "product_identification_helper": {
                                                "purl": "pkg:deb/ubuntu/gst-plugins-bad1.0@1.16.1-1ubuntu5?arch=source&distro=esm-apps/focal"
                                            }
                                        }
                                    },
                                    {
                                        "category": "product_version_range",
                                        "name": "vers:unknown/1.16.1-1ubuntu6",
                                        "product": {
                                            "name": "vers:unknown/1.16.1-1ubuntu6",
                                            "product_id": "CSAFPID-5919399",
                                            "product_identification_helper": {
                                                "purl": "pkg:deb/ubuntu/gst-plugins-bad1.0@1.16.1-1ubuntu6?arch=source&distro=esm-apps/focal"
                                            }
                                        }
                                    },
                                    {
                                        "category": "product_version_range",
                                        "name": "vers:unknown/1.16.1-1ubuntu8",
                                        "product": {
                                            "name": "vers:unknown/1.16.1-1ubuntu8",
                                            "product_id": "CSAFPID-5919400",
                                            "product_identification_helper": {
                                                "purl": "pkg:deb/ubuntu/gst-plugins-bad1.0@1.16.1-1ubuntu8?arch=source&distro=esm-apps/focal"
                                            }
                                        }
                                    },
                                    {
                                        "category": "product_version_range",
                                        "name": "vers:unknown/1.16.2-1ubuntu1",
                                        "product": {
                                            "name": "vers:unknown/1.16.2-1ubuntu1",
                                            "product_id": "CSAFPID-5919401",
                                            "product_identification_helper": {
                                                "purl": "pkg:deb/ubuntu/gst-plugins-bad1.0@1.16.2-1ubuntu1?arch=source&distro=esm-apps/focal"
                                            }
                                        }
                                    },
                                    {
                                        "category": "product_version_range",
                                        "name": "vers:unknown/1.16.2-1ubuntu2",
                                        "product": {
                                            "name": "vers:unknown/1.16.2-1ubuntu2",
                                            "product_id": "CSAFPID-5919402",
                                            "product_identification_helper": {
                                                "purl": "pkg:deb/ubuntu/gst-plugins-bad1.0@1.16.2-1ubuntu2?arch=source&distro=esm-apps/focal"
                                            }
                                        }
                                    },
                                    {
                                        "category": "product_version_range",
                                        "name": "vers:unknown/1.16.2-2.1ubuntu1",
                                        "product": {
                                            "name": "vers:unknown/1.16.2-2.1ubuntu1",
                                            "product_id": "CSAFPID-5919404",
                                            "product_identification_helper": {
                                                "purl": "pkg:deb/ubuntu/gst-plugins-bad1.0@1.16.2-2.1ubuntu1?arch=source&distro=esm-apps/focal"
                                            }
                                        }
                                    },
                                    {
                                        "category": "product_version_range",
                                        "name": "vers:unknown/1.16.2-2ubuntu1",
                                        "product": {
                                            "name": "vers:unknown/1.16.2-2ubuntu1",
                                            "product_id": "CSAFPID-5919403",
                                            "product_identification_helper": {
                                                "purl": "pkg:deb/ubuntu/gst-plugins-bad1.0@1.16.2-2ubuntu1?arch=source&distro=esm-apps/focal"
                                            }
                                        }
                                    },
                                    {
                                        "category": "product_version_range",
                                        "name": "vers:unknown/1.16.3-0ubuntu1",
                                        "product": {
                                            "name": "vers:unknown/1.16.3-0ubuntu1",
                                            "product_id": "CSAFPID-5919405",
                                            "product_identification_helper": {
                                                "purl": "pkg:deb/ubuntu/gst-plugins-bad1.0@1.16.3-0ubuntu1?arch=source&distro=esm-apps/focal"
                                            }
                                        }
                                    },
                                    {
                                        "category": "product_version_range",
                                        "name": "vers:unknown/1.16.3-0ubuntu1.1",
                                        "product": {
                                            "name": "vers:unknown/1.16.3-0ubuntu1.1",
                                            "product_id": "CSAFPID-5919406",
                                            "product_identification_helper": {
                                                "purl": "pkg:deb/ubuntu/gst-plugins-bad1.0@1.16.3-0ubuntu1.1?arch=source&distro=esm-apps/focal"
                                            }
                                        }
                                    },
                                    {
                                        "category": "product_version_range",
                                        "name": "vers:unknown/1.16.3-0ubuntu1.1+esm1",
                                        "product": {
                                            "name": "vers:unknown/1.16.3-0ubuntu1.1+esm1",
                                            "product_id": "CSAFPID-5919407",
                                            "product_identification_helper": {
                                                "purl": "pkg:deb/ubuntu/gst-plugins-bad1.0@1.16.3-0ubuntu1.1%2Besm1?arch=source&distro=esm-apps/focal"
                                            }
                                        }
                                    },
                                    {
                                        "category": "product_version_range",
                                        "name": "vers:unknown/>=0",
                                        "product": {
                                            "name": "vers:unknown/>=0",
                                            "product_id": "CSAFPID-5919408"
                                        }
                                    }
                                ],
                                "category": "product_name",
                                "name": "gst-plugins-bad1.0"
                            }
                        ],
                        "category": "product_family",
                        "name": "Ubuntu:Pro:20.04:LTS"
                    },
                    {
                        "branches": [
                            {
                                "branches": [
                                    {
                                        "category": "product_version_range",
                                        "name": "vers:unknown/1.18.5-1ubuntu1",
                                        "product": {
                                            "name": "vers:unknown/1.18.5-1ubuntu1",
                                            "product_id": "CSAFPID-5919409",
                                            "product_identification_helper": {
                                                "purl": "pkg:deb/ubuntu/gst-plugins-bad1.0@1.18.5-1ubuntu1?arch=source&distro=esm-apps/jammy"
                                            }
                                        }
                                    },
                                    {
                                        "category": "product_version_range",
                                        "name": "vers:unknown/1.18.5-1ubuntu3",
                                        "product": {
                                            "name": "vers:unknown/1.18.5-1ubuntu3",
                                            "product_id": "CSAFPID-5919410",
                                            "product_identification_helper": {
                                                "purl": "pkg:deb/ubuntu/gst-plugins-bad1.0@1.18.5-1ubuntu3?arch=source&distro=esm-apps/jammy"
                                            }
                                        }
                                    },
                                    {
                                        "category": "product_version_range",
                                        "name": "vers:unknown/1.20.0-2ubuntu2",
                                        "product": {
                                            "name": "vers:unknown/1.20.0-2ubuntu2",
                                            "product_id": "CSAFPID-5919411",
                                            "product_identification_helper": {
                                                "purl": "pkg:deb/ubuntu/gst-plugins-bad1.0@1.20.0-2ubuntu2?arch=source&distro=esm-apps/jammy"
                                            }
                                        }
                                    },
                                    {
                                        "category": "product_version_range",
                                        "name": "vers:unknown/1.20.1-1ubuntu2",
                                        "product": {
                                            "name": "vers:unknown/1.20.1-1ubuntu2",
                                            "product_id": "CSAFPID-5919412",
                                            "product_identification_helper": {
                                                "purl": "pkg:deb/ubuntu/gst-plugins-bad1.0@1.20.1-1ubuntu2?arch=source&distro=esm-apps/jammy"
                                            }
                                        }
                                    },
                                    {
                                        "category": "product_version_range",
                                        "name": "vers:unknown/1.20.3-0ubuntu1",
                                        "product": {
                                            "name": "vers:unknown/1.20.3-0ubuntu1",
                                            "product_id": "CSAFPID-5919413",
                                            "product_identification_helper": {
                                                "purl": "pkg:deb/ubuntu/gst-plugins-bad1.0@1.20.3-0ubuntu1?arch=source&distro=esm-apps/jammy"
                                            }
                                        }
                                    },
                                    {
                                        "category": "product_version_range",
                                        "name": "vers:unknown/1.20.3-0ubuntu1.1",
                                        "product": {
                                            "name": "vers:unknown/1.20.3-0ubuntu1.1",
                                            "product_id": "CSAFPID-5919414",
                                            "product_identification_helper": {
                                                "purl": "pkg:deb/ubuntu/gst-plugins-bad1.0@1.20.3-0ubuntu1.1?arch=source&distro=esm-apps/jammy"
                                            }
                                        }
                                    },
                                    {
                                        "category": "product_version_range",
                                        "name": "vers:unknown/1.20.3-0ubuntu1.1+esm2",
                                        "product": {
                                            "name": "vers:unknown/1.20.3-0ubuntu1.1+esm2",
                                            "product_id": "CSAFPID-5919415",
                                            "product_identification_helper": {
                                                "purl": "pkg:deb/ubuntu/gst-plugins-bad1.0@1.20.3-0ubuntu1.1%2Besm2?arch=source&distro=esm-apps/jammy"
                                            }
                                        }
                                    },
                                    {
                                        "category": "product_version_range",
                                        "name": "vers:unknown/>=0",
                                        "product": {
                                            "name": "vers:unknown/>=0",
                                            "product_id": "CSAFPID-5919416"
                                        }
                                    }
                                ],
                                "category": "product_name",
                                "name": "gst-plugins-bad1.0"
                            }
                        ],
                        "category": "product_family",
                        "name": "Ubuntu:Pro:22.04:LTS"
                    },
                    {
                        "branches": [
                            {
                                "branches": [
                                    {
                                        "category": "product_version_range",
                                        "name": "vers:unknown/1.22.4-1ubuntu1",
                                        "product": {
                                            "name": "vers:unknown/1.22.4-1ubuntu1",
                                            "product_id": "CSAFPID-5919417",
                                            "product_identification_helper": {
                                                "purl": "pkg:deb/ubuntu/gst-plugins-bad1.0@1.22.4-1ubuntu1?arch=source&distro=esm-apps/noble"
                                            }
                                        }
                                    },
                                    {
                                        "category": "product_version_range",
                                        "name": "vers:unknown/1.22.4-1ubuntu2",
                                        "product": {
                                            "name": "vers:unknown/1.22.4-1ubuntu2",
                                            "product_id": "CSAFPID-5919418",
                                            "product_identification_helper": {
                                                "purl": "pkg:deb/ubuntu/gst-plugins-bad1.0@1.22.4-1ubuntu2?arch=source&distro=esm-apps/noble"
                                            }
                                        }
                                    },
                                    {
                                        "category": "product_version_range",
                                        "name": "vers:unknown/1.22.4-1ubuntu4",
                                        "product": {
                                            "name": "vers:unknown/1.22.4-1ubuntu4",
                                            "product_id": "CSAFPID-5919419",
                                            "product_identification_helper": {
                                                "purl": "pkg:deb/ubuntu/gst-plugins-bad1.0@1.22.4-1ubuntu4?arch=source&distro=esm-apps/noble"
                                            }
                                        }
                                    },
                                    {
                                        "category": "product_version_range",
                                        "name": "vers:unknown/1.22.9-2ubuntu1",
                                        "product": {
                                            "name": "vers:unknown/1.22.9-2ubuntu1",
                                            "product_id": "CSAFPID-5919420",
                                            "product_identification_helper": {
                                                "purl": "pkg:deb/ubuntu/gst-plugins-bad1.0@1.22.9-2ubuntu1?arch=source&distro=esm-apps/noble"
                                            }
                                        }
                                    },
                                    {
                                        "category": "product_version_range",
                                        "name": "vers:unknown/1.24.0-1ubuntu3",
                                        "product": {
                                            "name": "vers:unknown/1.24.0-1ubuntu3",
                                            "product_id": "CSAFPID-5919421",
                                            "product_identification_helper": {
                                                "purl": "pkg:deb/ubuntu/gst-plugins-bad1.0@1.24.0-1ubuntu3?arch=source&distro=esm-apps/noble"
                                            }
                                        }
                                    },
                                    {
                                        "category": "product_version_range",
                                        "name": "vers:unknown/1.24.0-1ubuntu4",
                                        "product": {
                                            "name": "vers:unknown/1.24.0-1ubuntu4",
                                            "product_id": "CSAFPID-5919422",
                                            "product_identification_helper": {
                                                "purl": "pkg:deb/ubuntu/gst-plugins-bad1.0@1.24.0-1ubuntu4?arch=source&distro=esm-apps/noble"
                                            }
                                        }
                                    },
                                    {
                                        "category": "product_version_range",
                                        "name": "vers:unknown/1.24.2-1ubuntu4",
                                        "product": {
                                            "name": "vers:unknown/1.24.2-1ubuntu4",
                                            "product_id": "CSAFPID-5919423",
                                            "product_identification_helper": {
                                                "purl": "pkg:deb/ubuntu/gst-plugins-bad1.0@1.24.2-1ubuntu4?arch=source&distro=esm-apps/noble"
                                            }
                                        }
                                    },
                                    {
                                        "category": "product_version_range",
                                        "name": "vers:unknown/1.24.2-1ubuntu4+esm1",
                                        "product": {
                                            "name": "vers:unknown/1.24.2-1ubuntu4+esm1",
                                            "product_id": "CSAFPID-5919424",
                                            "product_identification_helper": {
                                                "purl": "pkg:deb/ubuntu/gst-plugins-bad1.0@1.24.2-1ubuntu4%2Besm1?arch=source&distro=esm-apps/noble"
                                            }
                                        }
                                    },
                                    {
                                        "category": "product_version_range",
                                        "name": "vers:unknown/>=0",
                                        "product": {
                                            "name": "vers:unknown/>=0",
                                            "product_id": "CSAFPID-5919425"
                                        }
                                    }
                                ],
                                "category": "product_name",
                                "name": "gst-plugins-bad1.0"
                            }
                        ],
                        "category": "product_family",
                        "name": "Ubuntu:Pro:24.04:LTS"
                    }
                ],
                "category": "vendor",
                "name": "Ubuntu"
            }
        ]
    },
    "vulnerabilities": [
        {
            "cve": "CVE-2026-1940",
            "cwe": {
                "id": "CWE-125",
                "name": "Out-of-bounds Read"
            },
            "notes": [
                {
                    "category": "description",
                    "text": "An incomplete fix for CVE-2024-47778 allows an out-of-bounds read in gst_wavparse_adtl_chunk() function. The patch added a size validation check lsize + 8 > size, but it does not account for the GST_ROUND_UP_2(lsize) used in the actual offset calculation. When lsize is an odd number, the parser advances more bytes than validated, causing OOB read.",
                    "title": "cveprojectv5 - https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/1xxx/CVE-2026-1940.json"
                },
                {
                    "category": "description",
                    "text": "An incomplete fix for CVE-2024-47778 allows an out-of-bounds read in gst_wavparse_adtl_chunk() function. The patch added a size validation check lsize + 8 > size, but it does not account for the GST_ROUND_UP_2(lsize) used in the actual offset calculation. When lsize is an odd number, the parser advances more bytes than validated, causing OOB read.",
                    "title": "nvd - https://services.nvd.nist.gov/rest/json/cves/2.0?cveId=CVE-2026-1940"
                },
                {
                    "category": "description",
                    "text": "An incomplete fix for CVE-2024-47778 allows an out-of-bounds read in gst_wavparse_adtl_chunk() function. The patch added a size validation check lsize + 8 > size, but it does not account for the GST_ROUND_UP_2(lsize) used in the actual offset calculation. When lsize is an odd number, the parser advances more bytes than validated, causing OOB read.",
                    "title": "debian - https://security-tracker.debian.org/tracker/CVE-2026-1940"
                },
                {
                    "category": "description",
                    "text": "An incomplete fix for CVE-2024-47778 allows an out-of-bounds read in gst_wavparse_adtl_chunk() function. The patch added a size validation check lsize + 8 > size, but it does not account for the GST_ROUND_UP_2(lsize) used in the actual offset calculation. When lsize is an odd number, the parser advances more bytes than validated, causing OOB read.",
                    "title": "osv - https://www.googleapis.com/download/storage/v1/b/osv-vulnerabilities/o/Ubuntu%2FUBUNTU-CVE-2026-1940.json?alt=media"
                },
                {
                    "category": "other",
                    "text": "0.00013",
                    "title": "EPSS"
                },
                {
                    "category": "other",
                    "text": "3.7",
                    "title": "NCSC Score"
                },
                {
                    "category": "other",
                    "text": "There is product data available from source Certbundde",
                    "title": "NCSC Score top increasing factors"
                },
                {
                    "category": "other",
                    "text": "Is related to a product by vendor Ubuntu, The value of the most recent EPSS score, Is related to a product by vendor Open Source, Is related to (a version of) an uncommon product, There is cwe data available from source Nvd, The value of the most recent CVSS (V3) score",
                    "title": "NCSC Score top decreasing factors"
                }
            ],
            "product_status": {
                "known_affected": [
                    "CSAFPID-5726736",
                    "CSAFPID-5726737",
                    "CSAFPID-5726738",
                    "CSAFPID-5726739",
                    "CSAFPID-1295663",
                    "CSAFPID-1436168",
                    "CSAFPID-1436169",
                    "CSAFPID-1317174",
                    "CSAFPID-5919357",
                    "CSAFPID-5919358",
                    "CSAFPID-5919359",
                    "CSAFPID-5919360",
                    "CSAFPID-5919361",
                    "CSAFPID-5919362",
                    "CSAFPID-5919363",
                    "CSAFPID-5919364",
                    "CSAFPID-5919365",
                    "CSAFPID-5919366",
                    "CSAFPID-5919367",
                    "CSAFPID-5919368",
                    "CSAFPID-5919369",
                    "CSAFPID-5919370",
                    "CSAFPID-5919371",
                    "CSAFPID-5919372",
                    "CSAFPID-5919373",
                    "CSAFPID-5919374",
                    "CSAFPID-5919375",
                    "CSAFPID-5919376",
                    "CSAFPID-5919377",
                    "CSAFPID-5919378",
                    "CSAFPID-5919379",
                    "CSAFPID-5919380",
                    "CSAFPID-5919381",
                    "CSAFPID-5919382",
                    "CSAFPID-5919383",
                    "CSAFPID-5919384",
                    "CSAFPID-5919385",
                    "CSAFPID-5919386",
                    "CSAFPID-5919387",
                    "CSAFPID-5919388",
                    "CSAFPID-5919389",
                    "CSAFPID-5919390",
                    "CSAFPID-5919391",
                    "CSAFPID-5919392",
                    "CSAFPID-5919393",
                    "CSAFPID-5919394",
                    "CSAFPID-5919395",
                    "CSAFPID-5919396",
                    "CSAFPID-5919397",
                    "CSAFPID-5919398",
                    "CSAFPID-5919399",
                    "CSAFPID-5919400",
                    "CSAFPID-5919401",
                    "CSAFPID-5919402",
                    "CSAFPID-5919403",
                    "CSAFPID-5919404",
                    "CSAFPID-5919405",
                    "CSAFPID-5919406",
                    "CSAFPID-5919407",
                    "CSAFPID-5919408",
                    "CSAFPID-5919409",
                    "CSAFPID-5919410",
                    "CSAFPID-5919411",
                    "CSAFPID-5919412",
                    "CSAFPID-5919413",
                    "CSAFPID-5919414",
                    "CSAFPID-5919415",
                    "CSAFPID-5919416",
                    "CSAFPID-5919417",
                    "CSAFPID-5919418",
                    "CSAFPID-5919419",
                    "CSAFPID-5919420",
                    "CSAFPID-5919421",
                    "CSAFPID-5919422",
                    "CSAFPID-5919423",
                    "CSAFPID-5919424",
                    "CSAFPID-5919425",
                    "CSAFPID-5919426",
                    "CSAFPID-5919427",
                    "CSAFPID-5919428",
                    "CSAFPID-5919429",
                    "CSAFPID-5919430",
                    "CSAFPID-5919431",
                    "CSAFPID-1317176",
                    "CSAFPID-1330299",
                    "CSAFPID-1317175"
                ]
            },
            "references": [
                {
                    "category": "external",
                    "summary": "Source - certbundde",
                    "url": "https://wid.cert-bund.de/.well-known/csaf/white/2026/wid-sec-w-2026-0525.json"
                },
                {
                    "category": "external",
                    "summary": "Source - debian",
                    "url": "https://security-tracker.debian.org/tracker/CVE-2026-1940"
                },
                {
                    "category": "external",
                    "summary": "Source - cveprojectv5",
                    "url": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/1xxx/CVE-2026-1940.json"
                },
                {
                    "category": "external",
                    "summary": "Source - nvd",
                    "url": "https://services.nvd.nist.gov/rest/json/cves/2.0?cveId=CVE-2026-1940"
                },
                {
                    "category": "external",
                    "summary": "Source - first",
                    "url": "https://api.first.org/data/v1/epss?limit=10000&offset=0"
                },
                {
                    "category": "external",
                    "summary": "Source - osv",
                    "url": "https://www.googleapis.com/download/storage/v1/b/osv-vulnerabilities/o/Ubuntu%2FUBUNTU-CVE-2026-1940.json?alt=media"
                },
                {
                    "category": "external",
                    "summary": "Reference - certbundde",
                    "url": "https://wid.cert-bund.de/.well-known/csaf/white/2026/wid-sec-w-2026-0525.json"
                },
                {
                    "category": "external",
                    "summary": "Reference - certbundde",
                    "url": "https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-0525"
                },
                {
                    "category": "external",
                    "summary": "Reference - certbundde; cveprojectv5; nvd; osv",
                    "url": "https://gstreamer.freedesktop.org/security/sa-2026-0001.html"
                },
                {
                    "category": "external",
                    "summary": "Reference - certbundde",
                    "url": "https://gstreamer.freedesktop.org/security/sa-2026-0002.html"
                },
                {
                    "category": "external",
                    "summary": "Reference - certbundde",
                    "url": "https://gstreamer.freedesktop.org/security/sa-2026-0003.html"
                },
                {
                    "category": "external",
                    "summary": "Reference - certbundde",
                    "url": "https://gstreamer.freedesktop.org/security/sa-2026-0004.html"
                },
                {
                    "category": "external",
                    "summary": "Reference - certbundde",
                    "url": "https://gstreamer.freedesktop.org/security/sa-2026-0005.html"
                },
                {
                    "category": "external",
                    "summary": "Reference - certbundde",
                    "url": "https://gstreamer.freedesktop.org/security/sa-2026-0006.html"
                },
                {
                    "category": "external",
                    "summary": "Reference - certbundde",
                    "url": "https://gstreamer.freedesktop.org/security/sa-2026-0007.html"
                },
                {
                    "category": "external",
                    "summary": "Reference - certbundde",
                    "url": "https://gstreamer.freedesktop.org/security/sa-2026-0008.html"
                },
                {
                    "category": "external",
                    "summary": "Reference - certbundde",
                    "url": "https://gstreamer.freedesktop.org/security/sa-2026-0009.html"
                },
                {
                    "category": "external",
                    "summary": "Reference - certbundde",
                    "url": "https://gstreamer.freedesktop.org/security/sa-2026-0010.html"
                },
                {
                    "category": "external",
                    "summary": "Reference - certbundde",
                    "url": "https://gstreamer.freedesktop.org/security/sa-2026-0011.html"
                },
                {
                    "category": "external",
                    "summary": "Reference - certbundde",
                    "url": "https://gstreamer.freedesktop.org/security/sa-2026-0012.html"
                },
                {
                    "category": "external",
                    "summary": "Reference - certbundde",
                    "url": "https://lists.debian.org/debian-security-announce/2026/msg00076.html"
                },
                {
                    "category": "external",
                    "summary": "Reference - cveprojectv5; nvd",
                    "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2436932"
                },
                {
                    "category": "external",
                    "summary": "Reference - cveprojectv5; nvd",
                    "url": "https://access.redhat.com/security/cve/CVE-2026-1940"
                },
                {
                    "category": "external",
                    "summary": "Reference - cveprojectv5; nvd",
                    "url": "https://gitlab.freedesktop.org/gstreamer/gstreamer/-/issues/4854"
                },
                {
                    "category": "external",
                    "summary": "Reference - cveprojectv5; nvd",
                    "url": "https://security-tracker.debian.org/tracker/CVE-2026-1940"
                },
                {
                    "category": "external",
                    "summary": "Reference - certbundde",
                    "url": "https://lists.suse.com/pipermail/sle-security-updates/2026-March/024897.html"
                },
                {
                    "category": "external",
                    "summary": "Reference - osv",
                    "url": "https://ubuntu.com/security/CVE-2026-1940"
                },
                {
                    "category": "external",
                    "summary": "Reference - osv",
                    "url": "https://www.cve.org/CVERecord?id=CVE-2026-1940"
                },
                {
                    "category": "external",
                    "summary": "Reference - certbundde",
                    "url": "https://lists.debian.org/debian-lts-announce/2026/03/msg00018.html"
                },
                {
                    "category": "external",
                    "summary": "Reference - certbundde",
                    "url": "https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/ZDKDIN2WNGBRBR3WLPM2DKIOENYVBTHM/"
                },
                {
                    "category": "external",
                    "summary": "Reference - certbundde",
                    "url": "https://lists.debian.org/debian-lts-announce/2026/03/msg00019.html"
                },
                {
                    "category": "external",
                    "summary": "Reference - certbundde",
                    "url": "https://ubuntu.com/security/notices/USN-8130-1"
                },
                {
                    "category": "external",
                    "summary": "Reference - certbundde",
                    "url": "https://ubuntu.com/security/notices/USN-8131-1"
                },
                {
                    "category": "external",
                    "summary": "Reference - certbundde",
                    "url": "https://access.redhat.com/errata/RHSA-2026:6300"
                },
                {
                    "category": "external",
                    "summary": "Reference - certbundde",
                    "url": "https://access.redhat.com/errata/RHSA-2026:6259"
                }
            ],
            "scores": [
                {
                    "cvss_v3": {
                        "version": "3.1",
                        "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L",
                        "baseScore": 5.1,
                        "baseSeverity": "MEDIUM"
                    },
                    "products": [
                        "CSAFPID-1295663",
                        "CSAFPID-1317174",
                        "CSAFPID-1317175",
                        "CSAFPID-1317176",
                        "CSAFPID-1330299",
                        "CSAFPID-1436168",
                        "CSAFPID-1436169",
                        "CSAFPID-5726736",
                        "CSAFPID-5726737",
                        "CSAFPID-5726738",
                        "CSAFPID-5726739",
                        "CSAFPID-5919357",
                        "CSAFPID-5919358",
                        "CSAFPID-5919359",
                        "CSAFPID-5919360",
                        "CSAFPID-5919361",
                        "CSAFPID-5919362",
                        "CSAFPID-5919363",
                        "CSAFPID-5919364",
                        "CSAFPID-5919365",
                        "CSAFPID-5919366",
                        "CSAFPID-5919367",
                        "CSAFPID-5919368",
                        "CSAFPID-5919369",
                        "CSAFPID-5919370",
                        "CSAFPID-5919371",
                        "CSAFPID-5919372",
                        "CSAFPID-5919373",
                        "CSAFPID-5919374",
                        "CSAFPID-5919375",
                        "CSAFPID-5919376",
                        "CSAFPID-5919377",
                        "CSAFPID-5919378",
                        "CSAFPID-5919379",
                        "CSAFPID-5919380",
                        "CSAFPID-5919381",
                        "CSAFPID-5919382",
                        "CSAFPID-5919383",
                        "CSAFPID-5919384",
                        "CSAFPID-5919385",
                        "CSAFPID-5919386",
                        "CSAFPID-5919387",
                        "CSAFPID-5919388",
                        "CSAFPID-5919389",
                        "CSAFPID-5919390",
                        "CSAFPID-5919391",
                        "CSAFPID-5919392",
                        "CSAFPID-5919393",
                        "CSAFPID-5919394",
                        "CSAFPID-5919395",
                        "CSAFPID-5919396",
                        "CSAFPID-5919397",
                        "CSAFPID-5919398",
                        "CSAFPID-5919399",
                        "CSAFPID-5919400",
                        "CSAFPID-5919401",
                        "CSAFPID-5919402",
                        "CSAFPID-5919403",
                        "CSAFPID-5919404",
                        "CSAFPID-5919405",
                        "CSAFPID-5919406",
                        "CSAFPID-5919407",
                        "CSAFPID-5919408",
                        "CSAFPID-5919409",
                        "CSAFPID-5919410",
                        "CSAFPID-5919411",
                        "CSAFPID-5919412",
                        "CSAFPID-5919413",
                        "CSAFPID-5919414",
                        "CSAFPID-5919415",
                        "CSAFPID-5919416",
                        "CSAFPID-5919417",
                        "CSAFPID-5919418",
                        "CSAFPID-5919419",
                        "CSAFPID-5919420",
                        "CSAFPID-5919421",
                        "CSAFPID-5919422",
                        "CSAFPID-5919423",
                        "CSAFPID-5919424",
                        "CSAFPID-5919425",
                        "CSAFPID-5919426",
                        "CSAFPID-5919427",
                        "CSAFPID-5919428",
                        "CSAFPID-5919429",
                        "CSAFPID-5919430",
                        "CSAFPID-5919431"
                    ]
                }
            ],
            "title": "CVE-2026-1940"
        }
    ]
}