https://db.gcve.eu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Mon, 28 Sep 2026 10:49:48 +0000 https://db.gcve.eu/vuln/alsa-2026:55435 <p><strong>Affected:</strong> AlmaLinux:10: gstreamer1-plugins-ugly-free</p> <p>GStreamer is a streaming media framework, based on graphs of elements which operate on media data. This package contains plug-ins whose license is not fully compatible with LGPL.</p> <p>Security Fix(es):</p> <p>* gstreamer: gstreamer1-plugins-ugly-free: gstreamer: integer overflow/underflow in asfdemux bounds checks leading to out-of-bounds read (CVE-2026-19389)</p> <p>For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</p> <p><strong>Affected:</strong> AlmaLinux:10: gstreamer1-plugins-ugly-free</p> <p>GStreamer is a streaming media framework, based on graphs of elements which operate on media data. This package contains plug-ins whose license is not fully compatible with LGPL.</p> <p>Security Fix(es):</p> <p>* gstreamer: gstreamer1-plugins-ugly-free: gstreamer: integer overflow/underflow in asfdemux bounds checks leading to out-of-bounds read (CVE-2026-19389)</p> <p>For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</p> https://db.gcve.eu/vuln/alsa-2026:55435 https://db.gcve.eu/vuln/fkie_cve-2026-19389 <p>Multiple integer overflow and underflow vulnerabilities were found in the GStreamer gst-plugins-ugly ASF demuxer (asfdemux) when parsing header objects from crafted ASF, WMV, or WMA files. Insufficient validation of attacker-controlled length and size values can bypass bounds checks and cause out-of-bounds heap reads. This can result in application crash, denial of service, or limited information disclosure when untrusted media is processed.</p> <p>Multiple integer overflow and underflow vulnerabilities were found in the GStreamer gst-plugins-ugly ASF demuxer (asfdemux) when parsing header objects from crafted ASF, WMV, or WMA files. Insufficient validation of attacker-controlled length and size values can bypass bounds checks and cause out-of-bounds heap reads. This can result in application crash, denial of service, or limited information disclosure when untrusted media is processed.</p> https://db.gcve.eu/vuln/fkie_cve-2026-19389 https://db.gcve.eu/vuln/ghsa-p44h-f9j6-g9ff <p>Multiple integer overflow and underflow vulnerabilities were found in the GStreamer gst-plugins-ugly ASF demuxer (asfdemux) when parsing header objects from crafted ASF, WMV, or WMA files. Insufficient validation of attacker-controlled length and size values can bypass bounds checks and cause out-of-bounds heap reads. This can result in application crash, denial of service, or limited information disclosure when untrusted media is processed.</p> <p>Multiple integer overflow and underflow vulnerabilities were found in the GStreamer gst-plugins-ugly ASF demuxer (asfdemux) when parsing header objects from crafted ASF, WMV, or WMA files. Insufficient validation of attacker-controlled length and size values can bypass bounds checks and cause out-of-bounds heap reads. This can result in application crash, denial of service, or limited information disclosure when untrusted media is processed.</p> https://db.gcve.eu/vuln/ghsa-p44h-f9j6-g9ff https://db.gcve.eu/vuln/rhsa-2026:55435 <p>security update for gstreamer1-plugins-ugly-free</p> <p>security update for gstreamer1-plugins-ugly-free</p> https://db.gcve.eu/vuln/rhsa-2026:55435 https://db.gcve.eu/vuln/rhsa-2026:67883 <p>gstreamer: gstreamer1-plugins-ugly-free: gstreamer: integer overflow/underflow in asfdemux bounds checks leading to out-of-bounds read</p> <p>gstreamer: gstreamer1-plugins-ugly-free: gstreamer: integer overflow/underflow in asfdemux bounds checks leading to out-of-bounds read</p> https://db.gcve.eu/vuln/rhsa-2026:67883 https://db.gcve.eu/vuln/ubuntu-cve-2026-19389 <p><strong>Affected:</strong> Ubuntu:16.04:LTS: gst-plugins-ugly1.0, Ubuntu:18.04:LTS: gst-plugins-ugly1.0, Ubuntu:20.04:LTS: gst-plugins-ugly1.0, Ubuntu:22.04:LTS: gst-plugins-ugly1.0, Ubuntu:24.04:LTS: gst-plugins-ugly1.0, Ubuntu:26.04:LTS: gst-plugins-ugly1.0</p> <p>Multiple integer overflow and underflow vulnerabilities were found in the GStreamer gst-plugins-ugly ASF demuxer (asfdemux) when parsing header objects from crafted ASF, WMV, or WMA files. Insufficient validation of attacker-controlled length and size values can bypass bounds checks and cause out-of-bounds heap reads. This can result in application crash, denial of service, or limited information disclosure when untrusted media is processed.</p> <p><strong>Affected:</strong> Ubuntu:16.04:LTS: gst-plugins-ugly1.0, Ubuntu:18.04:LTS: gst-plugins-ugly1.0, Ubuntu:20.04:LTS: gst-plugins-ugly1.0, Ubuntu:22.04:LTS: gst-plugins-ugly1.0, Ubuntu:24.04:LTS: gst-plugins-ugly1.0, Ubuntu:26.04:LTS: gst-plugins-ugly1.0</p> <p>Multiple integer overflow and underflow vulnerabilities were found in the GStreamer gst-plugins-ugly ASF demuxer (asfdemux) when parsing header objects from crafted ASF, WMV, or WMA files. Insufficient validation of attacker-controlled length and size values can bypass bounds checks and cause out-of-bounds heap reads. This can result in application crash, denial of service, or limited information disclosure when untrusted media is processed.</p> https://db.gcve.eu/vuln/ubuntu-cve-2026-19389 https://db.gcve.eu/vuln/wid-sec-w-2026-2662 <p>Ein Angreifer kann mehrere Schwachstellen in GStreamer ausnutzen, um Daten zu beschädigen, einen Denial-of-Service-Zustand herbeizuführen, vertrauliche Informationen offenzulegen oder möglicherweise beliebigen Code auszuführen.</p> <p>Ein Angreifer kann mehrere Schwachstellen in GStreamer ausnutzen, um Daten zu beschädigen, einen Denial-of-Service-Zustand herbeizuführen, vertrauliche Informationen offenzulegen oder möglicherweise beliebigen Code auszuführen.</p> https://db.gcve.eu/vuln/wid-sec-w-2026-2662