Buffer overflow in Red Hat Enterprise Linux 10

CVE-2026-19387

A heap out-of-bounds write vulnerability was found in the GStreamer gst-plugins-bad adpcmdec element when decoding IMA/DVI ADPCM audio. Insufficient validation of the per-block sample count for multi-channel streams allows a crafted WAV fi…

Vulnerability class: Buffer Overflow

CVSS v3 metric

CVSS v3 base score 7.6 (High). Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:H.

Affected products

Weakness classification (CWE)

References

Frequently asked questions

What is CVE-2026-19387?
CVE-2026-19387 is a high-severity vulnerability in Red Hat Enterprise Linux 10, classified under Out-of-bounds Write. CVSS score: 7.6/10. Published 2026-08-10.
How severe is CVE-2026-19387?
High severity. CVSS v3 base score is 7.6 out of 10.