CVE-2026-1940 — GStreamer: incomplete fix for CVE-2026-1940

An incomplete fix for CVE-2024-47778 allows an out-of-bounds read in the gst_wavparse_adtl_chunk() function.