CVE-2026-19387

EUVD-2026-54986
A heap out-of-bounds write vulnerability was found in the GStreamer gst-plugins-bad adpcmdec element when decoding IMA/DVI ADPCM audio. Insufficient validation of the per-block sample count for multi-channel streams allows a crafted WAV file to cause writes beyond the allocated output buffer. This can lead to application crash, denial of service, memory corruption, or potentially arbitrary code execution when untrusted media is processed.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
7.6 HIGH
NETWORK
LOW
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:H
Awaiting analysis
This vulnerability is currently awaiting analysis.
Base Score
CVSS 3.x
EPSS Score
Percentile: 29.14%
Debian logo
Debian Releases
Debian Product
Codename
gst-plugins-bad1.0
bookworm
vulnerable
bookworm (security)
vulnerable
forky
1.28.7-1
fixed
sid
1.28.7-1
fixed
trixie
1.26.2-3+deb13u3
fixed
trixie (security)
1.26.2-3+deb13u3
fixed
Ubuntu logo
Ubuntu Releases
Ubuntu Product
Codename
gst-plugins-bad1.0
bionic
needs-triage
focal
needs-triage
jammy
needs-triage
noble
needs-triage
resolute
needs-triage
trusty
needs-triage
xenial
needs-triage
Red Hat logo
Red Hat Enterprise Linux Releases
Red Hat Product
Release
gstreamer1-plugins-bad-free
RHEL 8
0:1.16.1-9.el8_10.2
fixed
RHEL 9
0:1.22.12-7.el9_8.4
fixed
gstreamer1-plugins-bad-free-devel
RHEL 8
0:1.16.1-9.el8_10.2
fixed
RHEL 9
0:1.22.12-7.el9_8.4
fixed
gstreamer1-plugins-bad-free-libs
RHEL 9
0:1.22.12-7.el9_8.4
fixed
gstreamer1-plugins-ugly-free
RHEL 9
0:1.22.12-6.el9_8.2
fixed
Amazon Linux logo
Amazon Linux Releases
Amazon Package
Release
gstreamer-plugins-bad-free
Amazon Linux 2
0:0.10.23-42.amzn2.0.6
fixed
gstreamer-plugins-bad-free-debuginfo
Amazon Linux 2
0:0.10.23-42.amzn2.0.6
fixed
gstreamer-plugins-bad-free-devel
Amazon Linux 2
0:0.10.23-42.amzn2.0.6
fixed
gstreamer-plugins-bad-free-devel-docs
Amazon Linux 2
0:0.10.23-42.amzn2.0.6
fixed
gstreamer1-plugin-openh264
Amazon Linux 2023
0:1.24.10-1.amzn2023.0.9
fixed
gstreamer1-plugin-openh264-debuginfo
Amazon Linux 2023
0:1.24.10-1.amzn2023.0.9
fixed
gstreamer1-plugins-bad-free
Amazon Linux 2
0:1.18.4-5.amzn2.0.9
fixed
Amazon Linux 2023
0:1.24.10-1.amzn2023.0.9
fixed
gstreamer1-plugins-bad-free-debuginfo
Amazon Linux 2
0:1.18.4-5.amzn2.0.9
fixed
Amazon Linux 2023
0:1.24.10-1.amzn2023.0.9
fixed
gstreamer1-plugins-bad-free-debugsource
Amazon Linux 2023
0:1.24.10-1.amzn2023.0.9
fixed
gstreamer1-plugins-bad-free-devel
Amazon Linux 2
0:1.18.4-5.amzn2.0.9
fixed
Amazon Linux 2023
0:1.24.10-1.amzn2023.0.9
fixed
gstreamer1-plugins-bad-free-libs
Amazon Linux 2023
0:1.24.10-1.amzn2023.0.9
fixed
gstreamer1-plugins-bad-free-libs-debuginfo
Amazon Linux 2023
0:1.24.10-1.amzn2023.0.9
fixed
Common Weakness Enumeration
Vulnerability Media Exposure
References
https://access.redhat.com/errata/RHSA-2026:55433
https://access.redhat.com/errata/RHSA-2026:55865
https://access.redhat.com/errata/RHSA-2026:56521
https://access.redhat.com/errata/RHSA-2026:65122
https://access.redhat.com/errata/RHSA-2026:65123
https://access.redhat.com/errata/RHSA-2026:65124
https://access.redhat.com/errata/RHSA-2026:66406
https://access.redhat.com/errata/RHSA-2026:66407
https://access.redhat.com/errata/RHSA-2026:67151
https://access.redhat.com/errata/RHSA-2026:67844
https://access.redhat.com/errata/RHSA-2026:67861
https://access.redhat.com/security/cve/CVE-2026-19387
https://bugzilla.redhat.com/show_bug.cgi?id=2513015
https://gitlab.freedesktop.org/gstreamer/gstreamer/-/merge_requests/12235
https://gstreamer.freedesktop.org/releases/1.28/