Red Hat Security AdvisoryRHSA-2026:55865
gstreamer1-plugins-bad-free and gstreamer1-plugins-ugly-free security update
Released 2026-08-17 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux AppStream (v. 9) gstreamer1-plugins-bad-free-1.22.12-7.el9_8.4, gstreamer1-plugins-bad-free-libs-1.22.12-7.el9_8.4, gstreamer1-plugins-ugly-free-1.22.12-6.el9_8.2
- Red Hat Enterprise Linux CodeReady Linux Builder (v. 9) gstreamer1-plugins-bad-free-devel-1.22.12-7.el9_8.4
Fixes 2 records
Priority LOW 33
A heap out-of-bounds write vulnerability was found in the GStreamer gst-plugins-bad adpcmdec element when decoding IMA/DVI ADPCM audio.
CVSS 3.1HIGH 7.6· Network · No auth · User interaction · EPSS 0.0038 · Published 2026-08-10 · Fixed in 1.26.7-2.el10_2.7, 1.24.11-3.el10_0.7 +10 CWE-787
Priority LOW 32
Multiple integer overflow and underflow vulnerabilities were found in the GStreamer gst-plugins-ugly ASF demuxer (asfdemux) when parsing header objects from crafted ASF, WMV, or WMA files.
CVSS 3.1HIGH 7.1· Network · No auth · User interaction · EPSS 0.00442 · Published 2026-08-10 · Fixed in 1.26.7-2.el10_2.2, 1.24.11-1.el10_0.3 +5 CWE-190
