VDB

CVE-2026-19389

CVE-2026-19389 PUBLISHED CVSS 7.1 HIGH

Reported by redhat · Published August 10, 2026

Multiple integer overflow and underflow vulnerabilities were found in the GStreamer gst-plugins-ugly ASF demuxer (asfdemux) when parsing header objects from crafted ASF, WMV, or WMA files. Insufficient validation of attacker-controlled length and size values can bypass bounds checks and cause out-of-bounds heap reads. This can result in application crash, denial of service, or limited information disclosure when untrusted media is processed.

Risk Scores

CVSS 3.1
7.1
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:H

Affected Products

VendorProductVersions
Red HatRed Hat Enterprise Linux 100:1.26.7-2.el10_2.2
Red HatRed Hat Enterprise Linux 10.0 Extended Update Support0:1.24.11-1.el10_0.3
Red HatRed Hat Enterprise Linux 90:1.22.12-7.el9_8.4
Red HatRed Hat Enterprise Linux 90:1.22.12-6.el9_8.2
Red HatRed Hat Enterprise Linux 9.2 Update Services for SAP Solutions0:1.18.4-4.el9_2
Red HatRed Hat Enterprise Linux 9.4 Update Services for SAP Solutions0:1.22.1-2.el9_4
Red HatRed Hat Enterprise Linux 9.6 Extended Update Support0:1.22.12-4.el9_6.2
Red HatRed Hat Enterprise Linux 7
Red HatRed Hat Enterprise Linux 8
Red HatRed Hat Enterprise Linux 8
Red HatRed Hat Enterprise Linux 90:1.22.12-7.el9_8.4, 0:1.22.12-7.el9_8.4, 0:1.22.12-7.el9_8.4
Red HatRed Hat Enterprise Linux 9.4 Update Services for SAP Solutions0:1.22.1-2.el9_4
Red HatRed Hat Enterprise Linux 100:1.26.7-2.el10_2.2, 0:1.26.7-2.el10_2.2, 0:1.26.7-2.el10_2.2
Red HatRed Hat Enterprise Linux 9.2 Update Services for SAP Solutions0:1.18.4-4.el9_2
Red HatRed Hat Enterprise Linux 9.6 Extended Update Support0:1.22.12-4.el9_6.2
Red HatRed Hat Enterprise Linux 7
Red HatRed Hat Enterprise Linux 10.0 Extended Update Support0:1.24.11-1.el10_0.3
Red HatRed Hat Enterprise Linux 90:1.22.12-6.el9_8.2, 0:1.22.12-6.el9_8.2, 0:1.22.12-6.el9_8.2

Timeline

  • Aug 10, 2026 Coalition ESS Score
  • Aug 10, 2026 CVE Published
  • Aug 16, 2026 Security Advisory
  • Aug 17, 2026 Distribution Patch
  • Aug 17, 2026 Security Advisory
  • Aug 18, 2026 Distribution Patch
  • Aug 18, 2026 Security Advisory
  • Aug 24, 2026 EPSS Score
  • Aug 25, 2026 Distribution Patch
  • Aug 26, 2026 EPSS Score
  • Aug 26, 2026 Distribution Patch
  • Aug 30, 2026 EPSS Score

References

Open in Interactive Console →
$ Console Community · 100/wk Open console ›