{"id":"CVE-2026-19389","aliases":["ALSA-2026:55435","ALSA-2026:55865","CLSA-2026-1787309460","DEBIAN-CVE-2026-19389","EUVD-2026-54987","GHSA-p44h-f9j6-g9ff","RHSA-2026:55435","RHSA-2026:55865","RHSA-2026:67882","RHSA-2026:67883","RHSA-2026:67930","RHSA-2026:67931","RLSA-2026:55435","RLSA-2026:55865","UBUNTU-CVE-2026-19389","USN-8896-1"],"status":"published","title":"Gstreamer: gstreamer1-plugins-ugly-free: gstreamer: integer overflow/underflow in asfdemux bounds checks leading to out-of-bounds read","description":"Multiple integer overflow and underflow vulnerabilities were found in the GStreamer gst-plugins-ugly ASF demuxer (asfdemux) when parsing header objects from crafted ASF, WMV, or WMA files. Insufficient validation of attacker-controlled length and size values can bypass bounds checks and cause out-of-bounds heap reads. This can result in application crash, denial of service, or limited information disclosure when untrusted media is processed.","severity":{"version":"3.1","score":7.1,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:H","level":"high","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-11","score":0.00442,"percentile":0.38871,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-190"],"published":"2026-08-10T02:57:42Z","modified":"2026-11-05T10:00:24Z","fixes":[{"ecosystem":"AlmaLinux:10","package":"gstreamer1-plugins-ugly-free","fixed_in":["1.26.7-2.el10_2.2"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.6","package":"gstreamer1-plugins-ugly-free","fixed_in":["1.22.12-3.el9_6.tuxcare.els3"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"gst-plugins-ugly1.0","fixed_in":["1.28.6-1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:10.2","package":"gstreamer1-plugins-ugly-free","fixed_in":["0:1.26.7-2.el10_2.2"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:10.2","package":"gstreamer1-plugins-ugly-free-debuginfo","fixed_in":["0:1.26.7-2.el10_2.2"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:10.2","package":"gstreamer1-plugins-ugly-free-debugsource","fixed_in":["0:1.26.7-2.el10_2.2"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:9.6::appstream","package":"gstreamer1-plugins-ugly-free","fixed_in":["0:1.22.12-4.el9_6.2"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:9.6::appstream","package":"gstreamer1-plugins-ugly-free-debuginfo","fixed_in":["0:1.22.12-4.el9_6.2"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:9.6::appstream","package":"gstreamer1-plugins-ugly-free-debugsource","fixed_in":["0:1.22.12-4.el9_6.2"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux_eus:10.0","package":"gstreamer1-plugins-ugly-free","fixed_in":["0:1.24.11-1.el10_0.3"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux_eus:10.0","package":"gstreamer1-plugins-ugly-free-debuginfo","fixed_in":["0:1.24.11-1.el10_0.3"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux_eus:10.0","package":"gstreamer1-plugins-ugly-free-debugsource","fixed_in":["0:1.24.11-1.el10_0.3"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_e4s:9.4::appstream","package":"gstreamer1-plugins-ugly-free","fixed_in":["0:1.22.1-2.el9_4"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_e4s:9.4::appstream","package":"gstreamer1-plugins-ugly-free-debuginfo","fixed_in":["0:1.22.1-2.el9_4"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_e4s:9.4::appstream","package":"gstreamer1-plugins-ugly-free-debugsource","fixed_in":["0:1.22.1-2.el9_4"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_e4s:9.2::appstream","package":"gstreamer1-plugins-ugly-free","fixed_in":["0:1.18.4-4.el9_2"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_e4s:9.2::appstream","package":"gstreamer1-plugins-ugly-free-debuginfo","fixed_in":["0:1.18.4-4.el9_2"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_e4s:9.2::appstream","package":"gstreamer1-plugins-ugly-free-debugsource","fixed_in":["0:1.18.4-4.el9_2"],"sources":["osv"]},{"ecosystem":"Rocky Linux:10","package":"gstreamer1-plugins-ugly-free","fixed_in":["0:1.26.7-2.el10_2.2"],"sources":["osv"]},{"ecosystem":"Ubuntu:Pro:16.04:LTS","package":"gst-plugins-ugly1.0","fixed_in":["1.8.3-1ubuntu0.1+esm2"],"sources":["osv"]},{"ecosystem":"Ubuntu:Pro:18.04:LTS","package":"gst-plugins-ugly1.0","fixed_in":["1.14.5-0ubuntu1~18.04.1+esm1"],"sources":["osv"]},{"ecosystem":"Ubuntu:Pro:20.04:LTS","package":"gst-plugins-ugly1.0","fixed_in":["1.16.2-2ubuntu0.1~esm1"],"sources":["osv"]},{"ecosystem":"Ubuntu:Pro:22.04:LTS","package":"gst-plugins-ugly1.0","fixed_in":["1.20.1-1ubuntu0.1~esm1"],"sources":["osv"]},{"ecosystem":"Ubuntu:Pro:24.04:LTS","package":"gst-plugins-ugly1.0","fixed_in":["1.24.1-1ubuntu0.1~esm1"],"sources":["osv"]},{"ecosystem":"Ubuntu:Pro:26.04:LTS","package":"gst-plugins-ugly1.0","fixed_in":["1.28.2-1ubuntu0.1~esm1"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"AlmaLinux:10","package":"gstreamer1-plugins-ugly-free","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.26.7-2.el10_2.2"}]}]},{"source":"osv","ecosystem":"AlmaLinux:9","package":"gstreamer1-plugins-bad-free","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.22.12-7.el9_8.4"}]}],"bundled":2},{"source":"osv","ecosystem":"AlmaLinux:9","package":"gstreamer1-plugins-bad-free-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.22.12-7.el9_8.4"}]}],"bundled":2},{"source":"osv","ecosystem":"AlmaLinux:9","package":"gstreamer1-plugins-bad-free-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.22.12-7.el9_8.4"}]}],"bundled":2},{"source":"osv","ecosystem":"AlmaLinux:9","package":"gstreamer1-plugins-ugly-free","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.22.12-6.el9_8.2"}]}],"bundled":2},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.6","package":"gstreamer1-plugins-ugly-free","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.22.12-3.el9_6.tuxcare.els3"}]}]},{"source":"osv","ecosystem":"Debian:12","package":"gst-plugins-ugly1.0","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1.22.0-2","1.22.0-2+deb12u1","1.22.0-2+deb12u2","1.22.1-1","1.22.10-1","1.22.3-1","1.22.3-2","1.22.4-1","1.22.5-1","1.22.6-1","1.22.7-1","1.22.8-1","1.22.9-1","1.23.1-1","1.23.2-1","1.23.90-1","1.24.0-1","1.24.1-1","1.24.10-1","1.24.11-1","1.24.12-1","1.24.2-1","1.24.3-1","1.24.4-1","1.24.5-1","1.24.6-1","1.24.7-1","1.24.8-1","1.24.9-1","1.25.1-1","1.25.50-1","1.25.50-2","1.25.90-1","1.25.90-2","1.26.0-1","1.26.1-1","1.26.10-1","1.26.2-1","1.26.3-1","1.26.3-2","1.26.3-3","1.26.3-4","1.26.4-1","1.26.5-1","1.26.5-2","1.26.6-1","1.26.7-1","1.26.8-1","1.26.9-1","1.27.1-1","1.27.2-1","1.27.50-1","1.27.50-2","1.27.90-1","1.28.0-1","1.28.1-1","1.28.2-1","1.28.3-1","1.28.4-1","1.28.5-1","1.28.6-1","1.28.7-1","1.28.8-1","1.29.1-1","1.29.2-1"]},{"source":"osv","ecosystem":"Debian:13","package":"gst-plugins-ugly1.0","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1.26.10-1","1.26.3-4","1.26.3-4+deb13u1","1.26.4-1","1.26.5-1","1.26.5-2","1.26.6-1","1.26.7-1","1.26.8-1","1.26.9-1","1.27.1-1","1.27.2-1","1.27.50-1","1.27.50-2","1.27.90-1","1.28.0-1","1.28.1-1","1.28.2-1","1.28.3-1","1.28.4-1","1.28.5-1","1.28.6-1","1.28.7-1","1.28.8-1","1.29.1-1","1.29.2-1"]},{"source":"osv","ecosystem":"Debian:14","package":"gst-plugins-ugly1.0","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.28.6-1"}]}],"versions":["1.26.10-1","1.26.3-4","1.26.4-1","1.26.5-1","1.26.5-2","1.26.6-1","1.26.7-1","1.26.8-1","1.26.9-1","1.27.1-1","1.27.2-1","1.27.50-1","1.27.50-2","1.27.90-1","1.28.0-1","1.28.1-1","1.28.2-1","1.28.3-1","1.28.4-1","1.28.5-1"]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.2","package":"gstreamer1-plugins-ugly-free","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.26.7-2.el10_2.2"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.2","package":"gstreamer1-plugins-ugly-free-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.26.7-2.el10_2.2"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.2","package":"gstreamer1-plugins-ugly-free-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.26.7-2.el10_2.2"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"gstreamer1-plugins-bad-free","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.22.12-7.el9_8.4"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"gstreamer1-plugins-bad-free-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.22.12-7.el9_8.4"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"gstreamer1-plugins-bad-free-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.22.12-7.el9_8.4"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"gstreamer1-plugins-bad-free-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.22.12-7.el9_8.4"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"gstreamer1-plugins-bad-free-libs-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.22.12-7.el9_8.4"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"gstreamer1-plugins-ugly-free","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.22.12-6.el9_8.2"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"gstreamer1-plugins-ugly-free-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.22.12-6.el9_8.2"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"gstreamer1-plugins-ugly-free-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.22.12-6.el9_8.2"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::crb","package":"gstreamer1-plugins-bad-free-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.22.12-7.el9_8.4"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::crb","package":"gstreamer1-plugins-bad-free-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.22.12-7.el9_8.4"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::crb","package":"gstreamer1-plugins-bad-free-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.22.12-7.el9_8.4"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::crb","package":"gstreamer1-plugins-bad-free-libs-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.22.12-7.el9_8.4"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.6::appstream","package":"gstreamer1-plugins-ugly-free","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.22.12-4.el9_6.2"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.6::appstream","package":"gstreamer1-plugins-ugly-free-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.22.12-4.el9_6.2"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.6::appstream","package":"gstreamer1-plugins-ugly-free-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.22.12-4.el9_6.2"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux_eus:10.0","package":"gstreamer1-plugins-ugly-free","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.24.11-1.el10_0.3"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux_eus:10.0","package":"gstreamer1-plugins-ugly-free-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.24.11-1.el10_0.3"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux_eus:10.0","package":"gstreamer1-plugins-ugly-free-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.24.11-1.el10_0.3"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:9.4::appstream","package":"gstreamer1-plugins-ugly-free","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.22.1-2.el9_4"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:9.4::appstream","package":"gstreamer1-plugins-ugly-free-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.22.1-2.el9_4"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:9.4::appstream","package":"gstreamer1-plugins-ugly-free-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.22.1-2.el9_4"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:9.2::appstream","package":"gstreamer1-plugins-ugly-free","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.18.4-4.el9_2"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:9.2::appstream","package":"gstreamer1-plugins-ugly-free-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.18.4-4.el9_2"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:9.2::appstream","package":"gstreamer1-plugins-ugly-free-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.18.4-4.el9_2"}]}]},{"source":"osv","ecosystem":"Rocky Linux:10","package":"gstreamer1-plugins-ugly-free","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.26.7-2.el10_2.2"}]}]},{"source":"osv","ecosystem":"Rocky Linux:9","package":"gstreamer1-plugins-bad-free","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.22.12-7.el9_8.4"}]}],"bundled":2},{"source":"osv","ecosystem":"Rocky Linux:9","package":"gstreamer1-plugins-ugly-free","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.22.12-6.el9_8.2"}]}],"bundled":2},{"source":"osv","ecosystem":"Ubuntu:Pro:16.04:LTS","package":"gst-plugins-ugly1.0","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.3-1ubuntu0.1+esm2"}]}],"versions":["1.6.0-1ubuntu1","1.6.1-1ubuntu1","1.6.2-1ubuntu1","1.7.1-1ubuntu1","1.7.2-1ubuntu1","1.7.90-1ubuntu1","1.7.91-1ubuntu1","1.8.0-1ubuntu1","1.8.1-1ubuntu0.1","1.8.2-1ubuntu0.1","1.8.3-1ubuntu0.1","1.8.3-1ubuntu0.1+esm1"]},{"source":"osv","ecosystem":"Ubuntu:Pro:18.04:LTS","package":"gst-plugins-ugly1.0","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.14.5-0ubuntu1~18.04.1+esm1"}]}],"versions":["1.12.3-1","1.12.3-1build1","1.12.4-1","1.12.4-1build1","1.13.1-1","1.13.91-1","1.14.0-1","1.14.1-1~ubuntu18.04.1","1.14.4-1~ubuntu18.04.1","1.14.5-0ubuntu1~18.04.1"]},{"source":"osv","ecosystem":"Ubuntu:Pro:20.04:LTS","package":"gst-plugins-ugly1.0","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.16.2-2ubuntu0.1~esm1"}]}],"versions":["1.16.1-1","1.16.1-1build1","1.16.2-1","1.16.2-2","1.16.2-2build1"]},{"source":"osv","ecosystem":"Ubuntu:Pro:22.04:LTS","package":"gst-plugins-ugly1.0","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.20.1-1ubuntu0.1~esm1"}]}],"versions":["1.18.5-1","1.20.0-1","1.20.0-1build1","1.20.1-1"]},{"source":"osv","ecosystem":"Ubuntu:Pro:24.04:LTS","package":"gst-plugins-ugly1.0","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.24.1-1ubuntu0.1~esm1"}]}],"versions":["1.22.5-1","1.22.6-1","1.22.7-1","1.22.8-1","1.22.10-1","1.24.1-1","1.24.1-1build1"]},{"source":"osv","ecosystem":"Ubuntu:Pro:26.04:LTS","package":"gst-plugins-ugly1.0","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.28.2-1ubuntu0.1~esm1"}]}],"versions":["1.26.6-1","1.26.7-1build1","1.27.2-1","1.27.90-1","1.28.0-1","1.28.1-1","1.28.2-1"]},{"source":"osv","ecosystem":"Ubuntu:Pro:16.04:LTS","package":"gst-plugins-ugly1.0","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.3-1ubuntu0.1+esm2"}]}],"versions":["1.6.0-1ubuntu1","1.6.1-1ubuntu1","1.6.2-1ubuntu1","1.7.1-1ubuntu1","1.7.2-1ubuntu1","1.7.90-1ubuntu1","1.7.91-1ubuntu1","1.8.0-1ubuntu1","1.8.1-1ubuntu0.1","1.8.2-1ubuntu0.1","1.8.3-1ubuntu0.1","1.8.3-1ubuntu0.1+esm1"],"bundled":7},{"source":"osv","ecosystem":"Ubuntu:Pro:18.04:LTS","package":"gst-plugins-ugly1.0","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.14.5-0ubuntu1~18.04.1+esm1"}]}],"versions":["1.12.3-1","1.12.3-1build1","1.12.4-1","1.12.4-1build1","1.13.1-1","1.13.91-1","1.14.0-1","1.14.1-1~ubuntu18.04.1","1.14.4-1~ubuntu18.04.1","1.14.5-0ubuntu1~18.04.1"],"bundled":7},{"source":"osv","ecosystem":"Ubuntu:Pro:20.04:LTS","package":"gst-plugins-ugly1.0","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.16.2-2ubuntu0.1~esm1"}]}],"versions":["1.16.1-1","1.16.1-1build1","1.16.2-1","1.16.2-2","1.16.2-2build1"],"bundled":7},{"source":"osv","ecosystem":"Ubuntu:Pro:22.04:LTS","package":"gst-plugins-ugly1.0","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.20.1-1ubuntu0.1~esm1"}]}],"versions":["1.18.5-1","1.20.0-1","1.20.0-1build1","1.20.1-1"],"bundled":7},{"source":"osv","ecosystem":"Ubuntu:Pro:24.04:LTS","package":"gst-plugins-ugly1.0","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.24.1-1ubuntu0.1~esm1"}]}],"versions":["1.22.5-1","1.22.6-1","1.22.7-1","1.22.8-1","1.22.10-1","1.24.1-1","1.24.1-1build1"],"bundled":7},{"source":"osv","ecosystem":"Ubuntu:Pro:26.04:LTS","package":"gst-plugins-ugly1.0","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.28.2-1ubuntu0.1~esm1"}]}],"versions":["1.26.6-1","1.26.7-1build1","1.27.2-1","1.27.90-1","1.28.0-1","1.28.1-1","1.28.2-1"],"bundled":7}],"products":[{"vendor":"red hat","product":"red hat enterprise linux 10"},{"vendor":"red hat","product":"red hat enterprise linux 10.0 extended update support"},{"vendor":"red hat","product":"red hat enterprise linux 7"},{"vendor":"red hat","product":"red hat enterprise linux 8"},{"vendor":"red hat","product":"red hat enterprise linux 9"},{"vendor":"red hat","product":"red hat enterprise linux 9.2 update services for sap solutions"},{"vendor":"red hat","product":"red hat enterprise linux 9.4 update services for sap solutions"},{"vendor":"red hat","product":"red hat enterprise linux 9.6 extended update support"}],"references":[{"url":"https://access.redhat.com/errata/RHSA-2026:55435","tags":["vendor-advisory","x_refsource_REDHAT","advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2026:55865","tags":["vendor-advisory","x_refsource_REDHAT","advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2026:67882","tags":["vendor-advisory","x_refsource_REDHAT","advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2026:67883","tags":["vendor-advisory","x_refsource_REDHAT","advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2026:67930","tags":["vendor-advisory","x_refsource_REDHAT","advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2026:67931","tags":["vendor-advisory","x_refsource_REDHAT","advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-19389","tags":["vdb-entry","x_refsource_REDHAT","report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2513016","tags":["issue-tracking","x_refsource_REDHAT","report"]},{"url":"https://gitlab.freedesktop.org/gstreamer/gstreamer/-/merge_requests/12233","tags":["article","report"]},{"url":"https://gstreamer.freedesktop.org/releases/1.28/","tags":["article","report"]},{"url":"https://gstreamer.freedesktop.org/security/sa-2026-0075.html","tags":["article","report"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-19389","tags":["advisory"]},{"url":"https://gstreamer.freedesktop.org/releases/1.28"},{"url":"https://github.com/advisories/GHSA-p44h-f9j6-g9ff"},{"url":"https://bugzilla.redhat.com/2513016","tags":["report"]},{"url":"https://errata.almalinux.org/10/ALSA-2026-55435.html","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-19387","tags":["report"]},{"url":"https://bugzilla.redhat.com/2513015","tags":["report"]},{"url":"https://errata.almalinux.org/9/ALSA-2026-55865.html","tags":["advisory"]},{"url":"https://errata.tuxcare.com/els_os/tuxcare9.6esu/CLSA-2026-1787309460.html","tags":["advisory"]},{"url":"https://security-tracker.debian.org/tracker/CVE-2026-19389","tags":["advisory"]},{"url":"https://access.redhat.com/security/updates/classification/#important","tags":["article"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_55435.json","tags":["advisory"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-19389","tags":["advisory","report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2513015","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_55865.json","tags":["advisory"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-19387","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-19387","tags":["advisory"]},{"url":"https://gitlab.freedesktop.org/gstreamer/gstreamer/-/merge_requests/12235","tags":["article"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_67882.json","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_67883.json","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_67930.json","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_67931.json","tags":["advisory"]},{"url":"https://errata.rockylinux.org/RLSA-2026:55435","tags":["advisory"]},{"url":"https://errata.rockylinux.org/RLSA-2026:55865","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2026-19389","tags":["report"]},{"url":"https://ubuntu.com/security/notices/USN-8896-1","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2023-38103","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2023-38104","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-2920","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-2922","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-53703","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-53704","tags":["report"]}],"sources":{"cve":[{"id":"CVE-2026-19389","title":"Gstreamer: gstreamer1-plugins-ugly-free: gstreamer: integer overflow/underflow in asfdemux bounds checks leading to out-of-bounds read","description":"Multiple integer overflow and underflow vulnerabilities were found in the GStreamer gst-plugins-ugly ASF demuxer (asfdemux) when parsing header objects from crafted ASF, WMV, or WMA files. Insufficient validation of attacker-controlled length and size values can bypass bounds checks and cause out-of-bounds heap reads. This can result in application crash, denial of service, or limited information disclosure when untrusted media is processed.","status":"published","published":"2026-08-10T02:57:42.305Z","modified":"2026-11-04T22:11:43.499Z","cvss":[{"version":"3.1","score":7.1,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:H","level":"high","assessor":"cna"}],"cwes":["CWE-190"],"updated_at":"2026-11-04T23:40:09.798467Z"}],"euvd":[{"id":"EUVD-2026-54987","description":"Multiple integer overflow and underflow vulnerabilities were found in the GStreamer gst-plugins-ugly ASF demuxer (asfdemux) when parsing header objects from crafted ASF, WMV, or WMA files. Insufficient validation of attacker-controlled length and size values can bypass bounds checks and cause out-of-bounds heap reads. This can result in application crash, denial of service, or limited information disclosure when untrusted media is processed.","status":"published","published":"2026-08-10T02:57:42Z","modified":"2026-11-04T22:11:43Z","cvss":[{"version":"3.1","score":7.1,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:H","level":"high"}],"updated_at":"2026-11-04T23:47:18.620008Z"}],"ghsa":[{"id":"GHSA-p44h-f9j6-g9ff","title":"Multiple integer overflow and underflow vulnerabilities were found in the GStreamer gst-plugins...","description":"Multiple integer overflow and underflow vulnerabilities were found in the GStreamer gst-plugins-ugly ASF demuxer (asfdemux) when parsing header objects from crafted ASF, WMV, or WMA files. Insufficient validation of attacker-controlled length and size values can bypass bounds checks and cause out-of-bounds heap reads. This can result in application crash, denial of service, or limited information disclosure when untrusted media is processed.","status":"published","published":"2026-08-10T03:31:01Z","modified":"2026-09-16T15:30:37Z","cvss":[{"version":"3.1","score":7.1,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:H","level":"high"}],"cwes":["CWE-190"],"updated_at":"2026-11-02T15:11:58.93371Z"}],"nvd":[{"id":"CVE-2026-19389","description":"Multiple integer overflow and underflow vulnerabilities were found in the GStreamer gst-plugins-ugly ASF demuxer (asfdemux) when parsing header objects from crafted ASF, WMV, or WMA files. Insufficient validation of attacker-controlled length and size values can bypass bounds checks and cause out-of-bounds heap reads. This can result in application crash, denial of service, or limited information disclosure when untrusted media is processed.","status":"published","published":"2026-08-10T03:16:40.38Z","modified":"2026-11-04T23:17:24.287Z","cvss":[{"version":"3.1","score":7.1,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:H","level":"high","assessor":"secondary"}],"cwes":["CWE-190"],"updated_at":"2026-11-05T01:45:10.513148Z"}],"osv":[{"id":"DEBIAN-CVE-2026-19389","description":"Multiple integer overflow and underflow vulnerabilities were found in the GStreamer gst-plugins-ugly ASF demuxer (asfdemux) when parsing header objects from crafted ASF, WMV, or WMA files. Insufficient validation of attacker-controlled length and size values can bypass bounds checks and cause out-of-bounds heap reads. This can result in application crash, denial of service, or limited information disclosure when untrusted media is processed.","status":"published","published":"2026-08-10T03:16:40.38Z","modified":"2026-11-05T10:00:24.552658387Z","cvss":[{"version":"3.1","score":7.1,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:H","level":"high"}],"updated_at":"2026-11-05T13:31:24.64316Z"},{"id":"RHSA-2026:55435","title":"Red Hat Security Advisory: gstreamer1-plugins-ugly-free security update","status":"published","published":"2026-08-17T10:16:56Z","modified":"2026-09-17T10:14:55Z","cvss":[{"version":"3.1","score":7.1,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:21.457353Z"},{"id":"RHSA-2026:55865","title":"Red Hat Security Advisory: gstreamer1-plugins-bad-free and gstreamer1-plugins-ugly-free security update","status":"published","published":"2026-08-18T10:21:19Z","modified":"2026-09-18T10:12:16Z","cvss":[{"version":"3.1","score":7.6,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:21.457353Z"},{"id":"RHSA-2026:67882","title":"Red Hat Security Advisory: gstreamer1-plugins-ugly-free security update","status":"published","published":"2026-09-17T10:18:04Z","modified":"2026-09-17T10:32:23.882730885Z","cvss":[{"version":"3.1","score":7.1,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:22.406388Z"},{"id":"RHSA-2026:67883","title":"Red Hat Security Advisory: gstreamer1-plugins-ugly-free security update","status":"published","published":"2026-09-17T10:18:05Z","modified":"2026-09-17T10:32:23.935490489Z","cvss":[{"version":"3.1","score":7.1,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:22.406388Z"},{"id":"RHSA-2026:67930","title":"Red Hat Security Advisory: gstreamer1-plugins-ugly-free security update","status":"published","published":"2026-09-17T10:18:09Z","modified":"2026-09-17T10:32:14.113292233Z","cvss":[{"version":"3.1","score":7.1,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:22.406388Z"},{"id":"RHSA-2026:67931","title":"Red Hat Security Advisory: gstreamer1-plugins-ugly-free security update","status":"published","published":"2026-09-17T10:18:10Z","modified":"2026-09-17T10:32:24.184934169Z","cvss":[{"version":"3.1","score":7.1,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:22.406388Z"},{"id":"RLSA-2026:55435","title":"Important: gstreamer1-plugins-ugly-free security update","description":"GStreamer is a streaming media framework, based on graphs of elements which operate on media data.  This package contains plug-ins whose license is not fully compatible with LGPL.\n\nSecurity Fix(es):\n\n* gstreamer: gstreamer1-plugins-ugly-free: gstreamer: integer overflow/underflow in asfdemux bounds checks leading to out-of-bounds read (CVE-2026-19389)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.","status":"published","published":"2026-08-17T18:06:54.076078Z","modified":"2026-08-17T18:30:04.713270432Z","cvss":[{"version":"3.1","score":7.1,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:26.111232Z"},{"id":"RLSA-2026:55865","title":"Important: gstreamer1-plugins-bad-free and gstreamer1-plugins-ugly-free security update","description":"GStreamer is a streaming media framework based on graphs of filters which operate on media data. The gstreamer1-plugins-bad-free package contains a collection of plug-ins for GStreamer.\n\nSecurity Fix(es):\n\n* gstreamer: gstreamer1-plugins-bad-free: gstreamer: heap out-of-bounds write in adpcmdec IMA/DVI ADPCM decoder (CVE-2026-19387)\n\n* gstreamer: gstreamer1-plugins-ugly-free: gstreamer: integer overflow/underflow in asfdemux bounds checks leading to out-of-bounds read (CVE-2026-19389)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.","status":"published","published":"2026-08-18T06:04:25.43626Z","modified":"2026-08-18T06:30:07.604132477Z","cvss":[{"version":"3.1","score":7.6,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:26.111232Z"},{"id":"UBUNTU-CVE-2026-19389","description":"Multiple integer overflow and underflow vulnerabilities were found in the GStreamer gst-plugins-ugly ASF demuxer (asfdemux) when parsing header objects from crafted ASF, WMV, or WMA files. Insufficient validation of attacker-controlled length and size values can bypass bounds checks and cause out-of-bounds heap reads. This can result in application crash, denial of service, or limited information disclosure when untrusted media is processed.","status":"published","published":"2026-08-10T03:16:00Z","modified":"2026-10-08T19:47:06.74092979Z","cvss":[{"version":"3.1","score":7.1,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T16:56:01.334185Z"},{"id":"ALSA-2026:55435","title":"Important: gstreamer1-plugins-ugly-free security update","description":"GStreamer is a streaming media framework, based on graphs of elements which operate on media data. This package contains plug-ins whose license is not fully compatible with LGPL.  \n\nSecurity Fix(es):  \n\n  * gstreamer: gstreamer1-plugins-ugly-free: gstreamer: integer overflow/underflow in asfdemux bounds checks leading to out-of-bounds read (CVE-2026-19389)\n\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.\n","status":"published","published":"2026-08-17T00:00:00Z","modified":"2026-10-29T11:30:34.734597715Z","updated_at":"2026-11-02T15:27:54.753319Z"},{"id":"ALSA-2026:55865","title":"Important: gstreamer1-plugins-bad-free and gstreamer1-plugins-ugly-free security update","description":"GStreamer is a streaming media framework based on graphs of filters which operate on media data. The gstreamer1-plugins-bad-free package contains a collection of plug-ins for GStreamer.  \n\nSecurity Fix(es):  \n\n  * gstreamer: gstreamer1-plugins-bad-free: gstreamer: heap out-of-bounds write in adpcmdec IMA/DVI ADPCM decoder (CVE-2026-19387)\n  * gstreamer: gstreamer1-plugins-ugly-free: gstreamer: integer overflow/underflow in asfdemux bounds checks leading to out-of-bounds read (CVE-2026-19389)\n\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.\n","status":"published","published":"2026-08-17T00:00:00Z","modified":"2026-10-29T11:32:36.574181569Z","updated_at":"2026-11-02T15:27:54.753319Z"},{"id":"CLSA-2026-1787309460","title":"gstreamer1-plugins-ugly-free: Fix of CVE-2026-19389","description":"- CVE-2026-19389: asfdemux: Avoid integer overflows during bounds checks","status":"published","published":"2026-08-21T10:51:10Z","modified":"2026-10-26T09:31:30.96762842Z","updated_at":"2026-11-02T15:43:47.20725Z"},{"id":"USN-8896-1","title":"gst-plugins-ugly1.0 vulnerabilities","description":"Michael Randrianantenaina discovered that GStreamer's Ugly Plugins\nincorrectly handled certain malformed RealMedia files. If a user were\ntricked into opening a crafted media file, an attacker could possibly use\nthis issue to execute arbitrary code. This issue only affected Ubuntu 16.04 LTS,\nUbuntu 18.04 LTS, Ubuntu 20.04 LTS and Ubuntu 22.04 LTS. (CVE-2023-38103,\nCVE-2023-38104)\n\nIt was discovered that GStreamer's Ugly Plugins incorrectly handled certain\nmalformed ASF and RealMedia files. If a user were tricked into opening a\ncrafted media file, an attacker could possibly use this issue to execute\narbitrary code. This issue only affected Ubuntu 16.04 LTS, Ubuntu 18.04 LTS,\nUbuntu 20.04 LTS and Ubuntu 22.04 LTS and Ubuntu 24.04 LTS. (CVE-2026-2920,\nCVE-2026-2922)\n\nTianshuo Han discovered that GStreamer's Ugly Plugins incorrectly handled\ncertain malformed RealMedia files. If a user were tricked into opening a\ncrafted media file, an attacker could possibly use this issue to cause a\ndenial of service or expose sensitive information. (CVE-2026-53703,\nCVE-2026-53704)\n\nSeonwook Kim discovered that GStreamer's Ugly Plugins incorrectly handled\ncertain malformed ASF files. If a user were tricked into opening a crafted\nmedia file, an attacker could possibly use this issue to cause a denial of\nservice or expose sensitive information. (CVE-2026-19389)","status":"published","published":"2026-10-07T19:43:55Z","modified":"2026-10-08T19:58:54.749655728Z","updated_at":"2026-11-02T16:58:26.907654Z"}]}}