Signal is active with 2 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
A heap out-of-bounds write vulnerability was found in the GStreamer gst-plugins-bad adpcmdec element when decoding IMA/DVI ADPCM audio. Insufficient validation of the per-block sample count for multi-channel streams allows a crafted WAV file to cause writes beyond the allocated output buffer. This can lead to application crash, denial of service, memory corruption, or potentially arbitrary code execution when untrusted media is processed.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
NONE
Momentum
NONE
CVE-2026-19387 A heap out-of-bounds write vulnerability was found in the GStreamer gst-plugins-bad adpcmdec element when decoding IMA/DVI ADPCM audio. Insufficient validation of the… https://www.cve.org/CVERecord?id=CVE-2026-19387
Post summary
A heap out‑of‑bounds write vulnerability has been disclosed in the GStreamer adpcmdec element used for IMA/DVI ADPCM audio decoding.
The severity is increased for this new vulnerability affecting Red Hat Enterprise Linux (CVE-2026-19387) https://vuldb.com/vuln/387289
Post summary
The post notes that the severity level of CVE-2026-19387 affecting Red Enterprise Linux has been increased, providing a link to a vulnerability database entry, but offers no further technical details or exploit information.