Summary
[1.26.7-2.7]
- Fix ADPCM decoder input validation (CVE-2026-19387)
Resolves: RHEL-235500
[1.26.7-2.5]
- Fix rfbsrc hextile and color read handling for non-32bpp
pixel formats (CVE-2026-59691)
Resolves: RHEL-193550
[1.26.7-2.4]
- Fix bytes/bits confusion in AV1 tile data size parsing (CVE-2026-52718)
Resolves: RHEL-184391
[1.26.7-2.3]
- Fix for CVE-2026-52719
Resolves: RHEL-184406
[1.26.7-2.2]
- Fix integer overflows in VMnc decoder (CVE-2026-52722)
Resolves: RHEL-184425
[1.26.7-2.1]
- Fix for CVE-2026-52720: validate framebuffer update rectangles
in VNC source plugin's RFB decoder
Resolves: RHEL-184462
Fixed packages 3
| Release | Package | Fixed in |
|---|---|---|
| Oracle Linux · 10 | gstreamer1-plugins-bad-free | 0:1.26.7-2.el10_2.7 |
| Oracle Linux · 10 | gstreamer1-plugins-bad-free-devel | 0:1.26.7-2.el10_2.7 |
| Oracle Linux · 10 | gstreamer1-plugins-bad-free-libs | 0:1.26.7-2.el10_2.7 |
Vulnerabilities 1
-
High 7.6
Gstreamer: gstreamer1-plugins-bad-free: gstreamer: heap out-of-bounds write in adpcmdec ima/dvi adpcm decoder
A heap out-of-bounds write vulnerability was found in the GStreamer gst-plugins-bad adpcmdec element when decoding IMA/DVI ADPCM audio. Insufficient validation of the per-block sample count for multi-channel streams allows a crafted WAV file to cause writes b…