High ELSA-2026-55435 1 CVE

Important: gstreamer1-plugins-ugly-free security update (Oracle Linux 10)

Published Aug 17, 2026 · Updated Aug 17, 2026

Ecosystem: Oracle Linux

Summary

[1.26.7-2.2]
- Fix CVE-2026-19389: integer overflow vulnerabilities in asfdemux
Resolves: RHEL-235515

Fixed packages 1

Release	Package	Fixed in
Oracle Linux · 10	gstreamer1-plugins-ugly-free	0:1.26.7-2.el10_2.2

Vulnerabilities 1

High 7.1

CVE-2026-19389

Gstreamer: gstreamer1-plugins-ugly-free: gstreamer: integer overflow/underflow in asfdemux bounds checks leading to out-of-bounds read

Multiple integer overflow and underflow vulnerabilities were found in the GStreamer gst-plugins-ugly ASF demuxer (asfdemux) when parsing header objects from crafted ASF, WMV, or WMA files. Insufficient validation of attacker-controlled length and size values …

Red Hat Red Hat Enterprise Linux 9 Red Hat Enterprise Linux 8 Red Hat Enterprise Linux 7 Linux Debian Ubuntu

Aug 10, 2026