Red Hat RHSA-2026:55433 Advisory: GStreamer Heap Overflow Vulnerability (CVE-2026-19387)

Vulnerability Overview Vulnerability Name: RHSA-2026:55433 - Security Advisory Vulnerability Type: Security Update Description: GStreamer is a graph-based streaming media framework used to process media data. The package contains a set of plugins, among which a security vulnerability exists that may lead to a heap out-of-bounds write. CVSS Rating: Important Affected Scope Affected Products: - Red Hat Enterprise Linux for x86_64 - Red Hat Enterprise Linux for IBM z Systems - Red Hat Enterprise Linux for Power, little endian - Red Hat Enterprise Linux for ARM 64 - Red Hat CodeReady Linux Builder for x86_64 - Red Hat CodeReady Linux Builder for Power, little endian - Red Hat CodeReady Linux Builder for ARM 64 - Red Hat CodeReady Linux Builder for IBM z Systems Remediation Remediation Measures: Apply the latest security updates. Update Link: https://access.redhat.com/articles/11258 Vulnerability Details Vulnerability ID: CVE-2026-19387 Description: The component within the package contains a heap buffer overflow write vulnerability, specifically occurring in the IMA/DVI ADPCM decoder. References https://access.redhat.com/security/updates/classification#important Affected Packages Red Hat Enterprise Linux for x86_64: - - - - - - Red Hat Enterprise Linux for x86_64 - Extended Update Support 10.2: - - - - - - Red Hat Enterprise Linux for IBM z Systems 10: - - - - - - Red Hat Enterprise Linux for IBM z Systems - Extended Update Support 10.2: - - - - - - Red Hat Enterprise Linux for Power, little endian 10: - - - - - - Red Hat Enterprise Linux for Power, little endian - Extended Update Support 10.2: - - - - - - Red Hat Enterprise Linux for ARM 64 10: - - - - - - Red Hat Enterprise Linux for ARM 64 - Extended Update Support 10.2: - - - - - - Red Hat CodeReady Linux Builder for x86_64 10: - - - - Red Hat CodeReady Linux Builder for Power, little endian 10: - - - - Red Hat CodeReady Linux Builder for ARM 64 10: - - - - Red Hat CodeReady Linux Builder for IBM z Systems 10: - - - - Red Hat CodeReady Linux Builder for x86_64 - Extended Update Support 10.2: - - - - Red Hat CodeReady Linux Builder for Power, little endian - Extended Update Support 10.2: - - - - Red Hat CodeReady Linux Builder for ARM 64 - Extended Update Support 10.2: - - - - Red Hat CodeReady Linux Builder for IBM z Systems - Extended Update Support 10.2: - - - - Summary This security advisory (RHSA-2026:55433) indicates an important security vulnerability in the package, which may lead to a heap buffer overflow write. Affected products include multiple versions of Red Hat Enterprise Linux and Red Hat CodeReady Linux Builder. Users are advised to apply the latest security updates as soon as possible to remediate this vulnerability.

Goal Reached Thanks to every supporter — we hit 100%!

Red Hat RHSA-2026:55433 Advisory: GStreamer Heap Overflow Vulnerability (CVE-2026-19387)

More from this source