https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T15:52:24.890102+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/alsa-2026:55433 ALSA-2026:55433 — Important: gstreamer1-plugins-bad-free security update 2026-10-03T15:52:25.190503+00:00

Affected: AlmaLinux:10: gstreamer1-plugins-bad-free, AlmaLinux:10: gstreamer1-plugins-bad-free-devel, AlmaLinux:10: gstreamer1-plugins-bad-free-libs

GStreamer is a streaming media framework based on graphs of filters which operate on media data. The gstreamer1-plugins-bad-free package contains a collection of plug-ins for GStreamer.

Security Fix(es):

* gstreamer: gstreamer1-plugins-bad-free: gstreamer: heap out-of-bounds write in adpcmdec IMA/DVI ADPCM decoder (CVE-2026-19387)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

 https://cve.radiocsirt.org/vuln/euvd-2026-371686 EUVD-2026-371686 2026-10-03T15:52:25.190566+00:00 EUVD-2026-371686 https://cve.radiocsirt.org/vuln/fkie_cve-2026-19387 fkie_cve-2026-19387 2026-10-03T15:52:25.190582+00:00

A heap out-of-bounds write vulnerability was found in the GStreamer gst-plugins-bad adpcmdec element when decoding IMA/DVI ADPCM audio. Insufficient validation of the per-block sample count for multi-channel streams allows a crafted WAV file to cause writes beyond the allocated output buffer. This can lead to application crash, denial of service, memory corruption, or potentially arbitrary code execution when untrusted media is processed.

 https://cve.radiocsirt.org/vuln/ghsa-32fh-qx9x-qfwj GHSA-32fh-qx9x-qfwj 2026-10-03T15:52:25.190605+00:00

A heap out-of-bounds write vulnerability was found in the GStreamer gst-plugins-bad adpcmdec element when decoding IMA/DVI ADPCM audio. Insufficient validation of the per-block sample count for multi-channel streams allows a crafted WAV file to cause writes beyond the allocated output buffer. This can lead to application crash, denial of service, memory corruption, or potentially arbitrary code execution when untrusted media is processed.

 https://cve.radiocsirt.org/vuln/rhsa-2026:55433 RHSA-2026:55433 — Red Hat Security Advisory: gstreamer1-plugins-bad-free security update 2026-10-03T15:52:25.190621+00:00

gstreamer: gstreamer1-plugins-bad-free: gstreamer: heap out-of-bounds write in adpcmdec IMA/DVI ADPCM decoder

 https://cve.radiocsirt.org/vuln/rhsa-2026:65122 RHSA-2026:65122 — Red Hat Security Advisory: gstreamer1-plugins-bad-free security update 2026-10-03T15:52:25.190639+00:00

gstreamer: gstreamer1-plugins-bad-free: gstreamer: heap out-of-bounds write in adpcmdec IMA/DVI ADPCM decoder

 https://cve.radiocsirt.org/vuln/rlsa-2026:55433 RLSA-2026:55433 — Important: gstreamer1-plugins-bad-free security update 2026-10-03T15:52:25.190654+00:00

Affected: Rocky Linux:10: gstreamer1-plugins-bad-free

GStreamer is a streaming media framework based on graphs of filters which operate on media data. The gstreamer1-plugins-bad-free package contains a collection of plug-ins for GStreamer.

Security Fix(es):

* gstreamer: gstreamer1-plugins-bad-free: gstreamer: heap out-of-bounds write in adpcmdec IMA/DVI ADPCM decoder (CVE-2026-19387)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2026-19387 UBUNTU-CVE-2026-19387 2026-10-03T15:52:25.190676+00:00

Affected: Ubuntu:Pro:14.04:LTS: gst-plugins-bad1.0, Ubuntu:Pro:16.04:LTS: gst-plugins-bad1.0, Ubuntu:Pro:18.04:LTS: gst-plugins-bad1.0, Ubuntu:Pro:20.04:LTS: gst-plugins-bad1.0, Ubuntu:Pro:22.04:LTS: gst-plugins-bad1.0, Ubuntu:Pro:24.04:LTS: gst-plugins-bad1.0, Ubuntu:26.04:LTS: gst-plugins-bad1.0

A heap out-of-bounds write vulnerability was found in the GStreamer gst-plugins-bad adpcmdec element when decoding IMA/DVI ADPCM audio. Insufficient validation of the per-block sample count for multi-channel streams allows a crafted WAV file to cause writes beyond the allocated output buffer. This can lead to application crash, denial of service, memory corruption, or potentially arbitrary code execution when untrusted media is processed.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2026-2662 WID-SEC-W-2026-2662 — GStreamer: Mehrere Schwachstellen 2026-10-03T15:52:25.190704+00:00

Ein Angreifer kann mehrere Schwachstellen in GStreamer ausnutzen, um Daten zu beschädigen, einen Denial-of-Service-Zustand herbeizuführen, vertrauliche Informationen offenzulegen oder möglicherweise beliebigen Code auszuführen.