Red Hat Security Advisory

RHSA-2026:67882

gstreamer1-plugins-ugly-free security update

Released 2026-09-16 · Red Hat rating Important · View on Red Hat →

Fixed in

Red Hat Enterprise Linux AppStream EUS (v.9.6) gstreamer1-plugins-ugly-free-1.22.12-4.el9_6.2

Fixes 1 record

TI-2026-15821 CVE-2026-19389 · GHSA-p44h-f9j6-g9ff

Integer overflow in Red Hat Enterprise Linux 10

LOW 32

Multiple integer overflow and underflow vulnerabilities were found in the GStreamer gst-plugins-ugly ASF demuxer (asfdemux) when parsing header objects from crafted ASF, WMV, or WMA files.

CVSS 3.1HIGH 7.1 Network No auth User interaction EPSS 0.00442 Published 2026-08-10 Fixed in 1.26.7-2.el10_2.2, 1.24.11-1.el10_0.3 +5 CWE-190