Gstreamer: gstreamer1-plugins-bad-free: gstreamer: heap out-of-bounds write in adpcmdec ima/dvi adpcm decoder
Priority LOW 33CWE-787Published · Updated
Key facts
- Attack vector
- Network
- Privileges required
- None
- User interaction
- Required
- Attack complexity
- Low
- Impact type
- —
- Confidentiality · integrity · availability
- Low · Low · High
- Fix status
- Fixed
Attack profile from CVSS 3.1 · CNA. Fix status from CNA and Red Hat.
Summary
A heap out-of-bounds write vulnerability was found in the GStreamer gst-plugins-bad adpcmdec element when decoding IMA/DVI ADPCM audio. Insufficient validation of the per-block sample count for multi-channel streams allows a crafted WAV file to cause writes beyond the allocated output buffer. This can lead to application crash, denial of service, memory corruption, or potentially arbitrary code execution when untrusted media is processed.
Why it matters now
Exploitation None reported CISA SSVC · not in CISA KEV
EPSS 0.0038 32nd percentileScored 2026-11-07
Fix Fixed Red Hat: 11 advisories
SSVC decision points
CISA ADP · SSVC 2.0.3
- Exploitation
- None
- Automatable
- No
- Technical impact
- Partial
The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.
Affected products
| Vendor | Product | Affected versions | Fixed in | Status | Source |
|---|---|---|---|---|---|
| Red Hat | Red Hat Enterprise Linux 10 | — | 1.26.7-2.el10_2.7 | Patch available | CNA |
| Red Hat | Red Hat Enterprise Linux 10.0 Extended Update Support | — | 1.24.11-3.el10_0.7 | Patch available | CNA |
| Red Hat | Red Hat Enterprise Linux 7 Extended Lifecycle Support | — | 1.10.4-8.el7_9 | Patch available | CNA |
| Red Hat | Red Hat Enterprise Linux 8 | — | 1.16.1-9.el8_10.2 | Patch available | CNA |
| Red Hat | Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support | — | 1.16.1-4.el8_4.5 | Patch available | CNA |
| Red Hat | Red Hat Enterprise Linux 8.4 Extended Update Support Long-Life Add-On | — | 1.16.1-4.el8_4.5 | Patch available | CNA |
| Red Hat | Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support | — | 1.16.1-4.el8_6.5 | Patch available | CNA |
| Red Hat | Red Hat Enterprise Linux 8.6 Extended Update Support Long-Life Add-On | — | 1.16.1-4.el8_6.5 | Patch available | CNA |
| Red Hat | Red Hat Enterprise Linux 8.8 Telecommunications Update Service | — | 1.16.1-4.el8_8.5 | Patch available | CNA |
| Red Hat | Red Hat Enterprise Linux 8.8 Update Services for SAP Solutions | — | 1.16.1-4.el8_8.5 | Patch available | CNA |
| Red Hat | Red Hat Enterprise Linux 9 | — | 1.22.12-7.el9_8.4 | Patch available | CNA |
| Red Hat | Red Hat Enterprise Linux 9 | — | 1.22.12-6.el9_8.2 | Patch available | CNA |
| Red Hat | Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions | — | 1.18.4-9.el9_2.6 | Patch available | CNA |
| Red Hat | Red Hat Enterprise Linux 9.4 Update Services for SAP Solutions | — | 1.22.1-6.el9_4.7 | Patch available | CNA |
| Red Hat | Red Hat Enterprise Linux 9.6 Extended Update Support | — | 1.22.12-5.el9_6.7 | Patch available | CNA |
- Red Hat Enterprise Linux 10 VendorRed Hat Affected — Fixed in 1.26.7-2.el10_2.7 Patch available CNA
- Red Hat Enterprise Linux 10.0 Extended Update Support VendorRed Hat Affected — Fixed in 1.24.11-3.el10_0.7 Patch available CNA
- Red Hat Enterprise Linux 7 Extended Lifecycle Support VendorRed Hat Affected — Fixed in 1.10.4-8.el7_9 Patch available CNA
- Red Hat Enterprise Linux 8 VendorRed Hat Affected — Fixed in 1.16.1-9.el8_10.2 Patch available CNA
- Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support VendorRed Hat Affected — Fixed in 1.16.1-4.el8_4.5 Patch available CNA
- Red Hat Enterprise Linux 8.4 Extended Update Support Long-Life Add-On VendorRed Hat Affected — Fixed in 1.16.1-4.el8_4.5 Patch available CNA
- Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support VendorRed Hat Affected — Fixed in 1.16.1-4.el8_6.5 Patch available CNA
- Red Hat Enterprise Linux 8.6 Extended Update Support Long-Life Add-On VendorRed Hat Affected — Fixed in 1.16.1-4.el8_6.5 Patch available CNA
- Red Hat Enterprise Linux 8.8 Telecommunications Update Service VendorRed Hat Affected — Fixed in 1.16.1-4.el8_8.5 Patch available CNA
- Red Hat Enterprise Linux 8.8 Update Services for SAP Solutions VendorRed Hat Affected — Fixed in 1.16.1-4.el8_8.5 Patch available CNA
- Red Hat Enterprise Linux 9 VendorRed Hat Affected — Fixed in 1.22.12-7.el9_8.4 Patch available CNA
- Red Hat Enterprise Linux 9 VendorRed Hat Affected — Fixed in 1.22.12-6.el9_8.2 Patch available CNA
- Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions VendorRed Hat Affected — Fixed in 1.18.4-9.el9_2.6 Patch available CNA
- Red Hat Enterprise Linux 9.4 Update Services for SAP Solutions VendorRed Hat Affected — Fixed in 1.22.1-6.el9_4.7 Patch available CNA
- Red Hat Enterprise Linux 9.6 Extended Update Support VendorRed Hat Affected — Fixed in 1.22.12-5.el9_6.7 Patch available CNA
CPE names CNA · 17
| CPE | Versions | Role | Vendor |
|---|---|---|---|
| cpe:/o:redhat:enterprise_linux:10.2 | 10.2 | — | Red Hat |
| cpe:/o:redhat:enterprise_linux_eus:10.0 | 10.0 | — | Red Hat |
| cpe:/o:redhat:rhel_els:7 | 7 | — | Red Hat |
| cpe:/a:redhat:enterprise_linux:8::appstream | 8 | — | Red Hat |
| cpe:/a:redhat:enterprise_linux:8::crb | 8 | — | Red Hat |
| cpe:/a:redhat:rhel_aus:8.4::appstream | 8.4 | — | Red Hat |
| cpe:/a:redhat:rhel_eus_long_life:8.4::appstream | 8.4 | — | Red Hat |
| cpe:/a:redhat:rhel_aus:8.6::appstream | 8.6 | — | Red Hat |
| cpe:/a:redhat:rhel_eus_long_life:8.6::appstream | 8.6 | — | Red Hat |
| cpe:/a:redhat:rhel_e4s:8.8::appstream | 8.8 | — | Red Hat |
- cpe:/o:redhat:enterprise_linux:10.2 Versions 10.2 — ·Red Hat
- cpe:/o:redhat:enterprise_linux_eus:10.0 Versions 10.0 — ·Red Hat
- cpe:/o:redhat:rhel_els:7 Versions 7 — ·Red Hat
- cpe:/a:redhat:enterprise_linux:8::appstream Versions 8 — ·Red Hat
- cpe:/a:redhat:enterprise_linux:8::crb Versions 8 — ·Red Hat
- cpe:/a:redhat:rhel_aus:8.4::appstream Versions 8.4 — ·Red Hat
- cpe:/a:redhat:rhel_eus_long_life:8.4::appstream Versions 8.4 — ·Red Hat
- cpe:/a:redhat:rhel_aus:8.6::appstream Versions 8.6 — ·Red Hat
- cpe:/a:redhat:rhel_eus_long_life:8.6::appstream Versions 8.6 — ·Red Hat
- cpe:/a:redhat:rhel_e4s:8.8::appstream Versions 8.8 — ·Red Hat
Show 7 more CPE
| CPE | Versions | Role | Vendor |
|---|---|---|---|
| cpe:/a:redhat:rhel_tus:8.8::appstream | 8.8 | — | Red Hat |
| cpe:/a:redhat:enterprise_linux:9::appstream | 9 | — | Red Hat |
| cpe:/a:redhat:enterprise_linux:9::crb | 9 | — | Red Hat |
| cpe:/a:redhat:rhel_e4s:9.2::appstream | 9.2 | — | Red Hat |
| cpe:/a:redhat:rhel_e4s:9.4::appstream | 9.4 | — | Red Hat |
| cpe:/a:redhat:rhel_eus:9.6::appstream | 9.6 | — | Red Hat |
| cpe:/a:redhat:rhel_eus:9.6::crb | 9.6 | — | Red Hat |
- cpe:/a:redhat:rhel_tus:8.8::appstream Versions 8.8 — ·Red Hat
- cpe:/a:redhat:enterprise_linux:9::appstream Versions 9 — ·Red Hat
- cpe:/a:redhat:enterprise_linux:9::crb Versions 9 — ·Red Hat
- cpe:/a:redhat:rhel_e4s:9.2::appstream Versions 9.2 — ·Red Hat
- cpe:/a:redhat:rhel_e4s:9.4::appstream Versions 9.4 — ·Red Hat
- cpe:/a:redhat:rhel_eus:9.6::appstream Versions 9.6 — ·Red Hat
- cpe:/a:redhat:rhel_eus:9.6::crb Versions 9.6 — ·Red Hat
Remediation
Red Hat 11 advisories
- RHSA-2026:67861 Released 2026-09-18 · Red Hat rating Importantgstreamer1-plugins-bad-free security update
- Red Hat Enterprise Linux Server (v. 7 ELS) gstreamer1-plugins-bad-free-1.10.4-8.el7_9
- Red Hat Enterprise Linux Server Optional (v. 7 ELS) gstreamer1-plugins-bad-free-devel-1.10.4-8.el7_9, gstreamer1-plugins-bad-free-gtk-1.10.4-8.el7_9
- RHSA-2026:67844 Released 2026-09-16 · Red Hat rating Importantgstreamer1-plugins-bad-free security update
- Red Hat Enterprise Linux AppStream AUS (v.8.4) gstreamer1-plugins-bad-free-1.16.1-4.el8_4.5
- Red Hat Enterprise Linux AppStream EUS EXTENSION (v.8.4) gstreamer1-plugins-bad-free-1.16.1-4.el8_4.5
- RHSA-2026:67151 Released 2026-09-14 · Red Hat rating Importantgstreamer1-plugins-bad-free security update
- Red Hat Enterprise Linux AppStream E4S (v.8.8) gstreamer1-plugins-bad-free-1.16.1-4.el8_8.5
- Red Hat Enterprise Linux AppStream TUS (v.8.8) gstreamer1-plugins-bad-free-1.16.1-4.el8_8.5
Show 8 more Red Hat advisories
- RHSA-2026:66407 Released 2026-09-10 · Red Hat rating Importantgstreamer1-plugins-bad-free security update
- Red Hat Enterprise Linux AppStream E4S (v.9.4) gstreamer1-plugins-bad-free-1.22.1-6.el9_4.7
- RHSA-2026:66406 Released 2026-09-10 · Red Hat rating Importantgstreamer1-plugins-bad-free security update
- Red Hat Enterprise Linux AppStream AUS (v.8.6) gstreamer1-plugins-bad-free-1.16.1-4.el8_6.5
- Red Hat Enterprise Linux AppStream EUS EXTENSION (v.8.6) gstreamer1-plugins-bad-free-1.16.1-4.el8_6.5
- RHSA-2026:65124 Released 2026-09-08 · Red Hat rating Importantgstreamer1-plugins-bad-free security update
- Red Hat CodeReady Linux Builder EUS (v.9.6) gstreamer1-plugins-bad-free-devel-1.22.12-5.el9_6.7
- Red Hat Enterprise Linux AppStream EUS (v.9.6) gstreamer1-plugins-bad-free-1.22.12-5.el9_6.7, gstreamer1-plugins-bad-free-libs-1.22.12-5.el9_6.7
- RHSA-2026:65122 Released 2026-09-08 · Red Hat rating Importantgstreamer1-plugins-bad-free security update
- Red Hat Enterprise Linux AppStream E4S (v.9.2) gstreamer1-plugins-bad-free-1.18.4-9.el9_2.6
- RHSA-2026:65123 Released 2026-09-08 · Red Hat rating Importantgstreamer1-plugins-bad-free security update
- Red Hat Enterprise Linux AppStream EUS (v. 10.0) gstreamer1-plugins-bad-free-1.24.11-3.el10_0.7, gstreamer1-plugins-bad-free-libs-1.24.11-3.el10_0.7
- Red Hat Enterprise Linux CodeReady Linux Builder EUS (v. 10.0) gstreamer1-plugins-bad-free-devel-1.24.11-3.el10_0.7
- RHSA-2026:56521 Released 2026-08-18 · Red Hat rating Importantgstreamer1-plugins-bad-free security update
- Red Hat Enterprise Linux AppStream (v. 8) gstreamer1-plugins-bad-free-1.16.1-9.el8_10.2
- Red Hat Enterprise Linux CRB (v. 8) gstreamer1-plugins-bad-free-devel-1.16.1-9.el8_10.2
- RHSA-2026:55865 Released 2026-08-17 · Red Hat rating Importantgstreamer1-plugins-bad-free and gstreamer1-plugins-ugly-free security update
- Red Hat Enterprise Linux AppStream (v. 9) gstreamer1-plugins-bad-free-1.22.12-7.el9_8.4, gstreamer1-plugins-bad-free-libs-1.22.12-7.el9_8.4, gstreamer1-plugins-ugly-free-1.22.12-6.el9_8.2
- Red Hat Enterprise Linux CodeReady Linux Builder (v. 9) gstreamer1-plugins-bad-free-devel-1.22.12-7.el9_8.4
- RHSA-2026:55433 Released 2026-08-17 · Red Hat rating Importantgstreamer1-plugins-bad-free security update
- Red Hat Enterprise Linux AppStream (v. 10) gstreamer1-plugins-bad-free-1.26.7-2.el10_2.7, gstreamer1-plugins-bad-free-libs-1.26.7-2.el10_2.7
- Red Hat Enterprise Linux CodeReady Linux Builder (v. 10) gstreamer1-plugins-bad-free-devel-1.26.7-2.el10_2.7
Fixed in the same release
Records fixed by the same vendor advisory or release, as the CNA lists them.
- Advisory ·
Red Hat Enterprise Linux 10, Red Hat Enterprise Linux 10.0 Extended Update Support and 5 more products — RHSA-2026:55865
2 records Highest priority Priority LOW 2 LOW
Other records, highest priority first
- TI-2026-15821 Integer overflow in Red Hat Enterprise Linux 10Priority LOW 32
Vendor assessments
Red Hat
Red Hat rating: Important. Red Hat's page for this CVE →
| Product | Status | Plan or fix |
|---|---|---|
| Red Hat CodeReady Linux Builder EUS (v.9.6) | Fixed | RHSA-2026:65124 |
| Red Hat Enterprise Linux AppStream (v. 10) | Fixed | RHSA-2026:55433 |
| Red Hat Enterprise Linux AppStream (v. 8) | Fixed | RHSA-2026:56521 |
| Red Hat Enterprise Linux AppStream (v. 9) | Fixed | RHSA-2026:55865 |
| Red Hat Enterprise Linux AppStream AUS (v.8.4) | Fixed | RHSA-2026:67844 |
| Red Hat Enterprise Linux AppStream AUS (v.8.6) | Fixed | RHSA-2026:66406 |
| Red Hat Enterprise Linux AppStream E4S (v.8.8) | Fixed | RHSA-2026:67151 |
| Red Hat Enterprise Linux AppStream E4S (v.9.2) | Fixed | RHSA-2026:65122 |
| Red Hat Enterprise Linux AppStream E4S (v.9.4) | Fixed | RHSA-2026:66407 |
| Red Hat Enterprise Linux AppStream EUS (v. 10.0) | Fixed | RHSA-2026:65123 |
| Red Hat Enterprise Linux AppStream EUS (v.9.6) | Fixed | RHSA-2026:65124 |
| Red Hat Enterprise Linux AppStream EUS EXTENSION (v.8.4) | Fixed | RHSA-2026:67844 |
| Red Hat Enterprise Linux AppStream EUS EXTENSION (v.8.6) | Fixed | RHSA-2026:66406 |
| Red Hat Enterprise Linux AppStream TUS (v.8.8) | Fixed | RHSA-2026:67151 |
| Red Hat Enterprise Linux CRB (v. 8) | Fixed | RHSA-2026:56521 |
| Red Hat Enterprise Linux CodeReady Linux Builder (v. 10) | Fixed | RHSA-2026:55433 |
| Red Hat Enterprise Linux CodeReady Linux Builder (v. 9) | Fixed | RHSA-2026:55865 |
| Red Hat Enterprise Linux CodeReady Linux Builder EUS (v. 10.0) | Fixed | RHSA-2026:65123 |
| Red Hat Enterprise Linux Server (v. 7 ELS) | Fixed | RHSA-2026:67861 |
| Red Hat Enterprise Linux Server Optional (v. 7 ELS) | Fixed | RHSA-2026:67861 |
Timeline
- 2026-10-02 Threatist record created from CVE-2026-19387
- 2026-10-03 Alias added: GHSA-32fh-qx9x-qfwj
References
Advisory 11
More Red Hat vulnerabilities
- TI-2019-15875 Protection mechanism failure in Jenkins Pipeline: Groovy Plugin KEVCVSS 3.1CRITICAL 9.9
- TI-2019-15874 Protection mechanism failure in Jenkins Script Security Plugin KEVCVSS 3.1CRITICAL 9.9
- TI-2019-08259 Underflow in PHP-FPM can lead to RCE KEVCVSS 3.1CRITICAL 9.8
- TI-2019-05363 Code injection in Elastic Kibana KEVCVSS 3.1CRITICAL 10.0
- TI-2019-03949 Out-of-bounds write in ESXi and Horizon DaaS KEVCVSS 3.1CRITICAL 9.8
- TI-2018-16080 A code execution vulnerability exists in the Stapler web framework used by Jenkins 2.153… KEVCVSS 3.1CRITICAL 9.8
Sources
- CVE-2026-19387 · CVE Program
- CVE-2026-19387 · NVD
- FIRST EPSS
- GHSA-32fh-qx9x-qfwj · GitHub Advisory Database · CC BY 4.0
- CVE-2026-19387 · Red Hat security data · CC BY 4.0
This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences