Search
Find a vulnerability
Search criteria
Related vulnerabilities
CERTFR-2026-AVI-1350
Vulnerability from certfr_avis - Published: 2026-10-21 - Updated: 2026-10-21
De multiples vulnérabilités ont été découvertes dans Oracle Java SE. Certaines d'entre elles permettent à un attaquant de provoquer une exécution de code arbitraire à distance, un déni de service à distance et une atteinte à la confidentialité des données.
Solutions
Se référer au bulletin de sécurité de l'éditeur pour l'obtention des correctifs (cf. section Documentation).
Impacted products
| Vendor | Product | Description | ||
|---|---|---|---|---|
| Oracle | Java SE | Oracle GraalVM Enterprise Edition version 21.3.19.1.1 | ||
| Oracle | Java SE | Oracle Java SE version 26.0.2 | ||
| Oracle | Java SE | Oracle JavaFX version 25.0.4 | ||
| Oracle | Java SE | Oracle Java SE version 11.0.32.1 | ||
| Oracle | Java SE | Oracle Java SE version 27 | ||
| Oracle | Java SE | Oracle GraalVM for JDK version 17.0.20.1 | ||
| Oracle | Java SE | Oracle Java SE version 25.0.4.1 | ||
| Oracle | Java SE | Oracle Java SE version 21.0.12.1 | ||
| Oracle | Java SE | Oracle GraalVM for JDK version 21.0.12.1 | ||
| Oracle | Java SE | Oracle Java SE version 17.0.20.1 | ||
| Oracle | Java SE | Oracle JavaFX version 21.0.12 | ||
| Oracle | Java SE | Oracle Java SE version 8u503-perf | ||
| Oracle | Java SE | Oracle JavaFX version 27 | ||
| Oracle | Java SE | Oracle Java SE version 8u503 |
References
| Title | Publication Time | Tags | |||
|---|---|---|---|---|---|
|
|||||
{
"$ref": "https://www.cert.ssi.gouv.fr/openapi.json",
"affected_systems": [
{
"description": "Oracle GraalVM Enterprise Edition version 21.3.19.1.1",
"product": {
"name": "Java SE",
"vendor": {
"name": "Oracle",
"scada": false
}
}
},
{
"description": "Oracle Java SE version 26.0.2",
"product": {
"name": "Java SE",
"vendor": {
"name": "Oracle",
"scada": false
}
}
},
{
"description": "Oracle JavaFX version 25.0.4",
"product": {
"name": "Java SE",
"vendor": {
"name": "Oracle",
"scada": false
}
}
},
{
"description": "Oracle Java SE version 11.0.32.1",
"product": {
"name": "Java SE",
"vendor": {
"name": "Oracle",
"scada": false
}
}
},
{
"description": "Oracle Java SE version 27",
"product": {
"name": "Java SE",
"vendor": {
"name": "Oracle",
"scada": false
}
}
},
{
"description": "Oracle GraalVM for JDK version 17.0.20.1",
"product": {
"name": "Java SE",
"vendor": {
"name": "Oracle",
"scada": false
}
}
},
{
"description": "Oracle Java SE version 25.0.4.1",
"product": {
"name": "Java SE",
"vendor": {
"name": "Oracle",
"scada": false
}
}
},
{
"description": "Oracle Java SE version 21.0.12.1",
"product": {
"name": "Java SE",
"vendor": {
"name": "Oracle",
"scada": false
}
}
},
{
"description": "Oracle GraalVM for JDK version 21.0.12.1",
"product": {
"name": "Java SE",
"vendor": {
"name": "Oracle",
"scada": false
}
}
},
{
"description": "Oracle Java SE version 17.0.20.1",
"product": {
"name": "Java SE",
"vendor": {
"name": "Oracle",
"scada": false
}
}
},
{
"description": "Oracle JavaFX version 21.0.12",
"product": {
"name": "Java SE",
"vendor": {
"name": "Oracle",
"scada": false
}
}
},
{
"description": "Oracle Java SE version 8u503-perf",
"product": {
"name": "Java SE",
"vendor": {
"name": "Oracle",
"scada": false
}
}
},
{
"description": "Oracle JavaFX version 27",
"product": {
"name": "Java SE",
"vendor": {
"name": "Oracle",
"scada": false
}
}
},
{
"description": "Oracle Java SE version 8u503",
"product": {
"name": "Java SE",
"vendor": {
"name": "Oracle",
"scada": false
}
}
}
],
"affected_systems_content": "",
"content": "## Solutions\n\nSe r\u00e9f\u00e9rer au bulletin de s\u00e9curit\u00e9 de l\u0027\u00e9diteur pour l\u0027obtention des correctifs (cf. section Documentation).",
"cves": [
{
"name": "CVE-2026-91333",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-91333"
},
{
"name": "CVE-2026-91335",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-91335"
},
{
"name": "CVE-2026-28901",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-28901"
},
{
"name": "CVE-2026-43804",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-43804"
},
{
"name": "CVE-2026-91382",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-91382"
},
{
"name": "CVE-2026-20664",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-20664"
},
{
"name": "CVE-2026-83380",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-83380"
},
{
"name": "CVE-2026-91394",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-91394"
},
{
"name": "CVE-2026-39044",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-39044"
},
{
"name": "CVE-2026-87255",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-87255"
},
{
"name": "CVE-2026-91334",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-91334"
},
{
"name": "CVE-2026-20665",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-20665"
},
{
"name": "CVE-2026-28947",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-28947"
},
{
"name": "CVE-2026-91418",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-91418"
},
{
"name": "CVE-2026-43658",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-43658"
},
{
"name": "CVE-2026-64713",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-64713"
},
{
"name": "CVE-2026-91487",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-91487"
},
{
"name": "CVE-2026-83374",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-83374"
},
{
"name": "CVE-2026-64728",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-64728"
},
{
"name": "CVE-2026-46469",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-46469"
},
{
"name": "CVE-2026-43740",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-43740"
},
{
"name": "CVE-2026-43727",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-43727"
},
{
"name": "CVE-2026-91332",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-91332"
},
{
"name": "CVE-2026-28907",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-28907"
},
{
"name": "CVE-2026-91395",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-91395"
},
{
"name": "CVE-2026-91417",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-91417"
},
{
"name": "CVE-2026-28953",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-28953"
},
{
"name": "CVE-2026-91397",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-91397"
},
{
"name": "CVE-2026-43705",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-43705"
},
{
"name": "CVE-2026-91462",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-91462"
},
{
"name": "CVE-2026-91453",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-91453"
},
{
"name": "CVE-2026-91374",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-91374"
},
{
"name": "CVE-2026-43707",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-43707"
},
{
"name": "CVE-2026-64787",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-64787"
},
{
"name": "CVE-2026-28955",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-28955"
},
{
"name": "CVE-2026-91379",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-91379"
},
{
"name": "CVE-2026-43734",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-43734"
},
{
"name": "CVE-2026-91452",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-91452"
},
{
"name": "CVE-2026-83378",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-83378"
},
{
"name": "CVE-2026-64783",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-64783"
},
{
"name": "CVE-2026-87291",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-87291"
},
{
"name": "CVE-2026-28903",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-28903"
},
{
"name": "CVE-2026-83395",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-83395"
},
{
"name": "CVE-2026-43712",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-43712"
},
{
"name": "CVE-2026-91373",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-91373"
},
{
"name": "CVE-2026-101737",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-101737"
},
{
"name": "CVE-2026-43732",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-43732"
},
{
"name": "CVE-2026-91477",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-91477"
},
{
"name": "CVE-2024-47778",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-47778"
},
{
"name": "CVE-2026-43742",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-43742"
},
{
"name": "CVE-2026-28902",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-28902"
},
{
"name": "CVE-2026-87294",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-87294"
},
{
"name": "CVE-2026-43745",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-43745"
},
{
"name": "CVE-2026-64757",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-64757"
},
{
"name": "CVE-2026-91381",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-91381"
},
{
"name": "CVE-2026-43716",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-43716"
},
{
"name": "CVE-2026-91411",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-91411"
},
{
"name": "CVE-2026-87290",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-87290"
},
{
"name": "CVE-2026-28861",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-28861"
},
{
"name": "CVE-2026-43701",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-43701"
},
{
"name": "CVE-2026-91463",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-91463"
},
{
"name": "CVE-2026-39872",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-39872"
},
{
"name": "CVE-2026-91396",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-91396"
},
{
"name": "CVE-2026-43721",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-43721"
},
{
"name": "CVE-2026-28871",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-28871"
},
{
"name": "CVE-2026-64730",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-64730"
},
{
"name": "CVE-2026-91484",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-91484"
},
{
"name": "CVE-2026-91464",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-91464"
},
{
"name": "CVE-2026-28859",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-28859"
},
{
"name": "CVE-2026-1940",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-1940"
},
{
"name": "CVE-2026-87367",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-87367"
},
{
"name": "CVE-2026-91375",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-91375"
},
{
"name": "CVE-2026-28984",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-28984"
},
{
"name": "CVE-2026-83387",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-83387"
},
{
"name": "CVE-2026-28905",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-28905"
},
{
"name": "CVE-2026-64719",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-64719"
},
{
"name": "CVE-2026-43720",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-43720"
},
{
"name": "CVE-2026-83381",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-83381"
},
{
"name": "CVE-2026-91402",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-91402"
},
{
"name": "CVE-2026-43676",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-43676"
},
{
"name": "CVE-2026-20691",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-20691"
},
{
"name": "CVE-2026-91398",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-91398"
},
{
"name": "CVE-2026-87293",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-87293"
},
{
"name": "CVE-2026-46470",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-46470"
},
{
"name": "CVE-2026-43699",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-43699"
},
{
"name": "CVE-2026-43725",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-43725"
},
{
"name": "CVE-2026-91380",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-91380"
},
{
"name": "CVE-2026-2921",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-2921"
},
{
"name": "CVE-2026-43731",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-43731"
},
{
"name": "CVE-2026-43726",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-43726"
},
{
"name": "CVE-2026-43663",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-43663"
},
{
"name": "CVE-2026-28958",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-28958"
},
{
"name": "CVE-2026-87292",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-87292"
},
{
"name": "CVE-2026-101516",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-101516"
},
{
"name": "CVE-2026-28857",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-28857"
},
{
"name": "CVE-2026-91410",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-91410"
},
{
"name": "CVE-2026-91451",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-91451"
},
{
"name": "CVE-2026-83400",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-83400"
},
{
"name": "CVE-2026-20643",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-20643"
},
{
"name": "CVE-2024-4367",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-4367"
},
{
"name": "CVE-2026-28942",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-28942"
},
{
"name": "CVE-2026-91400",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-91400"
},
{
"name": "CVE-2026-28946",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-28946"
},
{
"name": "CVE-2026-91415",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-91415"
},
{
"name": "CVE-2026-91409",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-91409"
},
{
"name": "CVE-2026-91385",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-91385"
},
{
"name": "CVE-2026-43660",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-43660"
},
{
"name": "CVE-2026-28904",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-28904"
},
{
"name": "CVE-2026-43715",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-43715"
},
{
"name": "CVE-2026-83376",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-83376"
},
{
"name": "CVE-2026-6732",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-6732"
},
{
"name": "CVE-2026-43713",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-43713"
},
{
"name": "CVE-2026-28883",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-28883"
},
{
"name": "CVE-2026-28847",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-28847"
},
{
"name": "CVE-2026-91461",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-91461"
}
],
"initial_release_date": "2026-10-21T00:00:00",
"last_revision_date": "2026-10-21T00:00:00",
"links": [],
"reference": "CERTFR-2026-AVI-1350",
"revisions": [
{
"description": "Version initiale",
"revision_date": "2026-10-21T00:00:00.000000"
}
],
"risks": [
{
"description": "D\u00e9ni de service \u00e0 distance"
},
{
"description": "Ex\u00e9cution de code arbitraire \u00e0 distance"
},
{
"description": "Atteinte \u00e0 l\u0027int\u00e9grit\u00e9 des donn\u00e9es"
},
{
"description": "Contournement de la politique de s\u00e9curit\u00e9"
},
{
"description": "Atteinte \u00e0 la confidentialit\u00e9 des donn\u00e9es"
}
],
"summary": "De multiples vuln\u00e9rabilit\u00e9s ont \u00e9t\u00e9 d\u00e9couvertes dans Oracle Java SE. Certaines d\u0027entre elles permettent \u00e0 un attaquant de provoquer une ex\u00e9cution de code arbitraire \u00e0 distance, un d\u00e9ni de service \u00e0 distance et une atteinte \u00e0 la confidentialit\u00e9 des donn\u00e9es.",
"title": "Multiples vuln\u00e9rabilit\u00e9s dans Oracle Java SE",
"vendor_advisories": [
{
"published_at": "2026-10-20",
"title": "Bulletin de s\u00e9curit\u00e9 Oracle Java SE cpuoct2026",
"url": "https://www.oracle.com/security-alerts/cpuoct2026.html"
}
]
}
UBUNTU-CVE-2026-39044 (CVE-2026-39044)
Vulnerability from osv_ubuntu – Published: 2026-06-17 00:00 – Updated: 2026-10-01 22:04 – Source website
VLAI
Details
Integer overflow in WAV parser cue handling
Severity
N/A (UNKNOWN)
References
{
"affected": [
{
"ecosystem_specific": {
"binaries": [
{
"binary_name": "gstreamer1.0-plugins-good",
"binary_version": "1.8.3-1ubuntu0.5+esm4"
},
{
"binary_name": "gstreamer1.0-pulseaudio",
"binary_version": "1.8.3-1ubuntu0.5+esm4"
},
{
"binary_name": "libgstreamer-plugins-good1.0-0",
"binary_version": "1.8.3-1ubuntu0.5+esm4"
}
]
},
"package": {
"ecosystem": "Ubuntu:Pro:16.04:LTS",
"name": "gst-plugins-good1.0",
"purl": "pkg:deb/ubuntu/gst-plugins-good1.0@1.8.3-1ubuntu0.5+esm4?arch=source\u0026distro=esm-infra-legacy/xenial"
},
"ranges": [
{
"events": [
{
"introduced": "0"
}
],
"type": "ECOSYSTEM"
}
],
"versions": [
"1.6.0-1ubuntu1",
"1.6.1-1ubuntu1",
"1.6.2-1ubuntu1",
"1.7.1-1ubuntu1",
"1.7.2-1ubuntu1",
"1.7.90-1ubuntu1",
"1.7.91-1ubuntu1",
"1.8.0-1ubuntu1",
"1.8.1-1ubuntu0.1",
"1.8.2-1ubuntu0.1",
"1.8.2-1ubuntu0.2",
"1.8.2-1ubuntu0.3",
"1.8.3-1ubuntu0.3",
"1.8.3-1ubuntu0.4",
"1.8.3-1ubuntu0.5",
"1.8.3-1ubuntu0.5+esm1",
"1.8.3-1ubuntu0.5+esm2",
"1.8.3-1ubuntu0.5+esm3",
"1.8.3-1ubuntu0.5+esm4"
]
},
{
"ecosystem_specific": {
"binaries": [
{
"binary_name": "gstreamer1.0-gtk3",
"binary_version": "1.14.5-0ubuntu1~18.04.3+esm4"
},
{
"binary_name": "gstreamer1.0-plugins-good",
"binary_version": "1.14.5-0ubuntu1~18.04.3+esm4"
},
{
"binary_name": "gstreamer1.0-pulseaudio",
"binary_version": "1.14.5-0ubuntu1~18.04.3+esm4"
},
{
"binary_name": "gstreamer1.0-qt5",
"binary_version": "1.14.5-0ubuntu1~18.04.3+esm4"
},
{
"binary_name": "libgstreamer-plugins-good1.0-0",
"binary_version": "1.14.5-0ubuntu1~18.04.3+esm4"
}
]
},
"package": {
"ecosystem": "Ubuntu:Pro:18.04:LTS",
"name": "gst-plugins-good1.0",
"purl": "pkg:deb/ubuntu/gst-plugins-good1.0@1.14.5-0ubuntu1~18.04.3+esm4?arch=source\u0026distro=esm-infra/bionic"
},
"ranges": [
{
"events": [
{
"introduced": "0"
}
],
"type": "ECOSYSTEM"
}
],
"versions": [
"1.12.3-1ubuntu1",
"1.12.4-1ubuntu1",
"1.13.1-1ubuntu1",
"1.13.91-1ubuntu1",
"1.14.0-1ubuntu1",
"1.14.1-1ubuntu1~ubuntu18.04.1",
"1.14.4-1ubuntu1~ubuntu18.04.1",
"1.14.5-0ubuntu1~18.04.1",
"1.14.5-0ubuntu1~18.04.2",
"1.14.5-0ubuntu1~18.04.3",
"1.14.5-0ubuntu1~18.04.3+esm1",
"1.14.5-0ubuntu1~18.04.3+esm2",
"1.14.5-0ubuntu1~18.04.3+esm3",
"1.14.5-0ubuntu1~18.04.3+esm4"
]
},
{
"ecosystem_specific": {
"binaries": [
{
"binary_name": "gstreamer1.0-gtk3",
"binary_version": "1.16.3-0ubuntu1.3+esm4"
},
{
"binary_name": "gstreamer1.0-plugins-good",
"binary_version": "1.16.3-0ubuntu1.3+esm4"
},
{
"binary_name": "gstreamer1.0-pulseaudio",
"binary_version": "1.16.3-0ubuntu1.3+esm4"
},
{
"binary_name": "gstreamer1.0-qt5",
"binary_version": "1.16.3-0ubuntu1.3+esm4"
},
{
"binary_name": "libgstreamer-plugins-good1.0-0",
"binary_version": "1.16.3-0ubuntu1.3+esm4"
}
]
},
"package": {
"ecosystem": "Ubuntu:Pro:20.04:LTS",
"name": "gst-plugins-good1.0",
"purl": "pkg:deb/ubuntu/gst-plugins-good1.0@1.16.3-0ubuntu1.3+esm4?arch=source\u0026distro=esm-infra/focal"
},
"ranges": [
{
"events": [
{
"introduced": "0"
}
],
"type": "ECOSYSTEM"
}
],
"versions": [
"1.16.1-1ubuntu1",
"1.16.2-1ubuntu1",
"1.16.2-1ubuntu2",
"1.16.2-1ubuntu2.1",
"1.16.3-0ubuntu1",
"1.16.3-0ubuntu1.1",
"1.16.3-0ubuntu1.2",
"1.16.3-0ubuntu1.3",
"1.16.3-0ubuntu1.3+esm1",
"1.16.3-0ubuntu1.3+esm2",
"1.16.3-0ubuntu1.3+esm3",
"1.16.3-0ubuntu1.3+esm4"
]
},
{
"ecosystem_specific": {
"availability": "No subscription required",
"binaries": [
{
"binary_name": "gstreamer1.0-gtk3",
"binary_version": "1.20.3-0ubuntu1.7"
},
{
"binary_name": "gstreamer1.0-plugins-good",
"binary_version": "1.20.3-0ubuntu1.7"
},
{
"binary_name": "gstreamer1.0-pulseaudio",
"binary_version": "1.20.3-0ubuntu1.7"
},
{
"binary_name": "gstreamer1.0-qt5",
"binary_version": "1.20.3-0ubuntu1.7"
},
{
"binary_name": "libgstreamer-plugins-good1.0-0",
"binary_version": "1.20.3-0ubuntu1.7"
}
]
},
"package": {
"ecosystem": "Ubuntu:22.04:LTS",
"name": "gst-plugins-good1.0",
"purl": "pkg:deb/ubuntu/gst-plugins-good1.0@1.20.3-0ubuntu1.7?arch=source\u0026distro=jammy"
},
"ranges": [
{
"events": [
{
"introduced": "0"
},
{
"fixed": "1.20.3-0ubuntu1.7"
}
],
"type": "ECOSYSTEM"
}
],
"versions": [
"1.18.5-1ubuntu2",
"1.18.5-1ubuntu3",
"1.20.0-2ubuntu1",
"1.20.1-1ubuntu1",
"1.20.3-0ubuntu1",
"1.20.3-0ubuntu1.1",
"1.20.3-0ubuntu1.3",
"1.20.3-0ubuntu1.4",
"1.20.3-0ubuntu1.5",
"1.20.3-0ubuntu1.6"
]
},
{
"ecosystem_specific": {
"availability": "No subscription required",
"binaries": [
{
"binary_name": "gstreamer1.0-gtk3",
"binary_version": "1.24.2-1ubuntu1.5"
},
{
"binary_name": "gstreamer1.0-plugins-good",
"binary_version": "1.24.2-1ubuntu1.5"
},
{
"binary_name": "gstreamer1.0-pulseaudio",
"binary_version": "1.24.2-1ubuntu1.5"
},
{
"binary_name": "gstreamer1.0-qt5",
"binary_version": "1.24.2-1ubuntu1.5"
},
{
"binary_name": "gstreamer1.0-qt6",
"binary_version": "1.24.2-1ubuntu1.5"
},
{
"binary_name": "libgstreamer-plugins-good1.0-0",
"binary_version": "1.24.2-1ubuntu1.5"
}
]
},
"package": {
"ecosystem": "Ubuntu:24.04:LTS",
"name": "gst-plugins-good1.0",
"purl": "pkg:deb/ubuntu/gst-plugins-good1.0@1.24.2-1ubuntu1.5?arch=source\u0026distro=noble"
},
"ranges": [
{
"events": [
{
"introduced": "0"
},
{
"fixed": "1.24.2-1ubuntu1.5"
}
],
"type": "ECOSYSTEM"
}
],
"versions": [
"1.22.6-1ubuntu1",
"1.22.6-1ubuntu2",
"1.22.8-3ubuntu1",
"1.22.9-1ubuntu1",
"1.24.0-1ubuntu5",
"1.24.0-1ubuntu7",
"1.24.1-2ubuntu1",
"1.24.2-1ubuntu1",
"1.24.2-1ubuntu1.1",
"1.24.2-1ubuntu1.2",
"1.24.2-1ubuntu1.3",
"1.24.2-1ubuntu1.4"
]
},
{
"ecosystem_specific": {
"binaries": [
{
"binary_name": "gstreamer1.0-gtk3",
"binary_version": "1.26.5-1ubuntu2.3"
},
{
"binary_name": "gstreamer1.0-plugins-good",
"binary_version": "1.26.5-1ubuntu2.3"
},
{
"binary_name": "gstreamer1.0-pulseaudio",
"binary_version": "1.26.5-1ubuntu2.3"
},
{
"binary_name": "gstreamer1.0-qt5",
"binary_version": "1.26.5-1ubuntu2.3"
},
{
"binary_name": "gstreamer1.0-qt6",
"binary_version": "1.26.5-1ubuntu2.3"
},
{
"binary_name": "libgstreamer-plugins-good1.0-0",
"binary_version": "1.26.5-1ubuntu2.3"
}
]
},
"package": {
"ecosystem": "Ubuntu:25.10",
"name": "gst-plugins-good1.0",
"purl": "pkg:deb/ubuntu/gst-plugins-good1.0@1.26.5-1ubuntu2.3?arch=source\u0026distro=questing"
},
"ranges": [
{
"events": [
{
"introduced": "0"
}
],
"type": "ECOSYSTEM"
}
],
"versions": [
"1.26.0-1ubuntu2",
"1.26.0-1ubuntu3",
"1.26.2-1ubuntu1",
"1.26.4-1ubuntu1",
"1.26.5-1ubuntu1",
"1.26.5-1ubuntu2",
"1.26.5-1ubuntu2.1",
"1.26.5-1ubuntu2.2",
"1.26.5-1ubuntu2.3"
]
}
],
"aliases": [],
"details": "Integer overflow in WAV parser cue handling",
"id": "UBUNTU-CVE-2026-39044",
"modified": "2026-10-01T22:04:01Z",
"published": "2026-06-17T00:00:00Z",
"references": [
{
"type": "REPORT",
"url": "https://ubuntu.com/security/CVE-2026-39044"
},
{
"type": "REPORT",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-39044"
},
{
"type": "REPORT",
"url": "https://gstreamer.freedesktop.org/security/sa-2026-0021.html"
},
{
"type": "ADVISORY",
"url": "https://ubuntu.com/security/notices/USN-8584-1"
}
],
"related": [
"USN-8584-1"
],
"schema_version": "1.7.0",
"severity": [
{
"score": "medium",
"type": "Ubuntu"
}
],
"upstream": [
"CVE-2026-39044"
]
}
WID-SEC-W-2026-0525
Vulnerability from csaf_certbund - Published: 2026-02-25 23:00 - Updated: 2026-08-10 22:00Summary
GStreamer: Mehrere Schwachstellen
Severity
Hoch
Scope
13 vulnerabilities in this advisory, including CVE-2026-39044.
CVE-2026-39044
Known affected: 13 products