[SECURITY] [DSA 6489-1] gst-plugins-base1.0 security update

------------------------------------------------------------------------- Debian Security Advisory DSA-6489-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff September 08, 2026 https://www.debian.org/security/faq -...

CVE-2026-55294

A heap buffer overflow vulnerability exists in the ihevcd_get_tu_data_size function of ihevcd_utils.c within the Media Codecs component. This flaw allows for an out-of-bounds write , which could lead to a local escalation of privilege without requiring additional execution privileges or user inte...

EUVD-2026-73997

In a2dpvendoropusdecoderdecodepacket of a2dpvendoropusdecoder.cc, there is a possible out of bounds write due to a heap buffer overflow. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2026-45515

In a2dpvendoropusdecoderdecodepacket of a2dpvendoropusdecoder.cc, there is a possible out of bounds write due to a heap buffer overflow. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2026-45515

A heap buffer overflow exists in the a2dp_vendor_opus_decoder_decode_packet function within a2dp_vendor_opus_decoder.cc . This vulnerability results in a possible out of bounds write , which could enable local escalation of privilege without requiring additional execution privileges or user inter...

SUSE CVE-2026-86421

ImageMagick before 7.1.2-30 and 6.9.13-55 contains a memory leak in the MSL image decoder. A crafted MSL image triggers memory allocation without proper deallocation, allowing an attacker to exhaust memory and cause a denial of service...

Important: Red Hat Security Advisory: gstreamer1-plugins-bad-free security update

An update for gstreamer1-plugins-bad-free is now available for Red Hat Enterprise Linux 9.6 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity...

Important: Red Hat Security Advisory: gstreamer1-plugins-bad-free security update

An update for gstreamer1-plugins-bad-free is now available for Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed...

Important: Red Hat Security Advisory: gstreamer1-plugins-bad-free security update

An update for gstreamer1-plugins-bad-free is now available for Red Hat Enterprise Linux 10.0 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity...

CVE-2026-79377

A heap overflow in the a2dpdecodersbc.cpp component of Bestechnic Co., Ltd BES2300 Bluetooth Audio SoC firmware v3.x and earlier allows attackers to cause a Denial of Service DoS via sending a crafted L2CAP packet...

CVE-2026-79379

A buffer overflow in the SBCDecodeFrames function of Bestechnic Co., Ltd BES2300 Bluetooth Audio SoC firmware v3.x and earlier and fixed in v.5.0 allows attackers to cause a Denial of Service DoS via sending a crafted frame...

Debian dsa-6489 : gir1.2-gst-plugins-base-1.0 - security update

The remote Debian 13 host has packages installed that are affected by a vulnerability as referenced in the dsa-6489 advisory. - ------------------------------------------------------------------------- Debian Security Advisory DSA-6489-1 [email protected] https://www.debian.org/security/ Moritz...

RHEL 10 : gstreamer1-plugins-bad-free (RHSA-2026:65123)

The remote Redhat Enterprise Linux 10 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2026:65123 advisory. GStreamer is a streaming media framework based on graphs of filters which operate on media data. The gstreamer1-plugins-bad-free package contains a...

CVE-2026-79379

Bestechnic Co., Ltd BES2300 Bluetooth Audio SoC firmware versions v3.x and earlier are vulnerable to a buffer overflow in the SBC_DecodeFrames() function. An attacker can exploit this by sending a crafted frame , potentially leading to a Denial of Service (DoS) . The issue has been resolved in fi...

PT-2026-87073

A heap overflow in the a2dp decoder sbc.cpp component of Bestechnic Co., Ltd BES2300 Bluetooth Audio SoC firmware v3.x and earlier allows attackers to cause a Denial of Service DoS via sending a crafted L2CAP packet...

RHEL 9 : gstreamer1-plugins-bad-free (RHSA-2026:65122)

The remote Redhat Enterprise Linux 9 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2026:65122 advisory. GStreamer is a streaming media framework based on graphs of filters which operate on media data. The gstreamer1-plugins-bad-free package contains a...

PT-2026-88235

In a2dp vendor opus decoder decode packet of a2dp vendor opus decoder.cc, there is a possible out of bounds write due to a heap buffer overflow. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2026-79377

A heap overflow in the a2dpdecodersbc.cpp component of Bestechnic Co., Ltd BES2300 Bluetooth Audio SoC firmware v3.x and earlier allows attackers to cause a Denial of Service DoS via sending a crafted L2CAP packet...

MGASA-2026-0380 Updated python-pyasn1 packages fix security vulnerabilities

The BER decoder shared by the CER and DER codecs parses long-form tags by accumulating continuation octets in a loop with no upper bound on the size of the tag ID. A crafted input can force the decoder to build an arbitrarily large integer, with CPU cost growing quadratically in input size — a 1 ...

Updated python-pyasn1 packages fix security vulnerabilities

The BER decoder shared by the CER and DER codecs parses long-form tags by accumulating continuation octets in a loop with no upper bound on the size of the tag ID. A crafted input can force the decoder to build an arbitrarily large integer, with CPU cost growing quadratically in input size — a 1 ...