Red Hat Security Advisory

RHSA-2026:65122

gstreamer1-plugins-bad-free security update

Released 2026-09-08 · Red Hat rating Important · View on Red Hat →

Fixed in

Red Hat Enterprise Linux AppStream E4S (v.9.2) gstreamer1-plugins-bad-free-1.18.4-9.el9_2.6

TI-2026-15820 CVE-2026-19387 · GHSA-32fh-qx9x-qfwj

LOW 33

A heap out-of-bounds write vulnerability was found in the GStreamer gst-plugins-bad adpcmdec element when decoding IMA/DVI ADPCM audio.

CVSS 3.1HIGH 7.6 Network No auth User interaction EPSS 0.0038 Published 2026-08-10 Fixed in 1.26.7-2.el10_2.7, 1.24.11-3.el10_0.7 +10 CWE-787