https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-09T05:01:33.964311+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/alsa-2020:1631 ALSA-2020:1631 — Low: GStreamer, libmad, and SDL security, bug fix, and enhancement update 2026-10-09T05:01:33.975526+00:00

Affected: AlmaLinux:8: SDL2, AlmaLinux:8: SDL2-devel, AlmaLinux:8: SDL2-static, AlmaLinux:8: gstreamer1, AlmaLinux:8: gstreamer1-devel, AlmaLinux:8: gstreamer1-plugins-bad-free, AlmaLinux:8: gstreamer1-plugins-bad-free-devel, AlmaLinux:8: gstreamer1-plugins-ugly-free, AlmaLinux:8: libmad, AlmaLinux:8: libmad-devel and 3 more

The GStreamer library provides a streaming media framework based on graphs of media data filters.

The libmad package is an MPEG audio decoder capable of 24-bit output.

Simple DirectMedia Layer (SDL) is a cross-platform multimedia library designed to provide fast access to the graphics frame buffer and audio device.

Security Fix(es):

* libmad: Double-free in the mad_decoder_run() function (CVE-2018-7263)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.

 https://cve.radiocsirt.org/vuln/cnvd-2018-06078 cnvd-2018-06078 2026-10-09T05:01:33.975608+00:00 cnvd-2018-06078 https://cve.radiocsirt.org/vuln/euvd-2026-63123 EUVD-2026-63123 2026-10-09T05:01:33.975626+00:00 EUVD-2026-63123 https://cve.radiocsirt.org/vuln/fkie_cve-2018-7263 fkie_cve-2018-7263 2026-10-09T05:01:33.975639+00:00

The mad_decoder_run() function in decoder.c in Underbit libmad through 0.15.1b allows remote attackers to cause a denial of service (SIGABRT because of double free or corruption) or possibly have unspecified other impact via a crafted file. NOTE: this may overlap CVE-2017-11552.

 https://cve.radiocsirt.org/vuln/ghsa-c423-r73f-cv75 GHSA-c423-r73f-cv75 2026-10-09T05:01:33.975662+00:00

The mad_decoder_run() function in decoder.c in Underbit libmad through 0.15.1b allows remote attackers to cause a denial of service (SIGABRT because of double free or corruption) or possibly have unspecified other impact via a crafted file. NOTE: this may overlap CVE-2017-11552.

 https://cve.radiocsirt.org/vuln/gsd-2018-7263 gsd-2018-7263 2026-10-09T05:01:33.975677+00:00 gsd-2018-7263 https://cve.radiocsirt.org/vuln/msrc_cve-2018-7263 msrc_CVE-2018-7263 — The mad_decoder_run() function in decoder.c in Underbit libmad through 0.15.1b allows remote attackers to cause a denia… 2026-10-09T05:01:33.975688+00:00 msrc_CVE-2018-7263 https://cve.radiocsirt.org/vuln/rhsa-2020:1631 RHSA-2020:1631 — Red Hat Security Advisory: GStreamer, libmad, and SDL security, bug fix, and enhancement update 2026-10-09T05:01:33.975704+00:00

libmad: Double-free in the mad_decoder_run() function

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2018-7263 UBUNTU-CVE-2018-7263 2026-10-09T05:01:33.975720+00:00

Affected: Ubuntu:16.04:LTS: mpg321, Ubuntu:18.04:LTS: mpg321, Ubuntu:20.04:LTS: mpg321, Ubuntu:22.04:LTS: mpg321, Ubuntu:24.04:LTS: mpg321, Ubuntu:25.10: mpg321, Ubuntu:26.04:LTS: mpg321

The mad_decoder_run() function in decoder.c in Underbit libmad through 0.15.1b allows remote attackers to cause a denial of service (SIGABRT because of double free or corruption) or possibly have unspecified other impact via a crafted file. NOTE: this may overlap CVE-2017-11552.