CLSA-2026-1792423678

Import Source

JSON Data

https://api.osv.dev/v1/vulns/CLSA-2026-1792423678

Upstream

CVE (2)

Published

2026-10-20T01:41:36Z

Modified

2026-10-26T09:31:46Z

Summary

gstreamer1-plugins-bad-free: Fix of 4 CVEs

Details

CVE-2026-3082: jpegparser: fix heap buffer overflow by checking the Huffman table length against its storage before copying it
CVE-2026-59692: dtls: fix stack buffer overflow by allocating the buffer for the peer certificate subject DN to its printed length

References

Affected packages

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Fixed

1.10.4-4.el7_9.tuxcare.els2

source

"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/oraclelinux7els/CLSA-2026-1792423678.json"

Name: gstreamer1-plugins-bad-free-devel
Purl: pkg:rpm/tuxcare/gstreamer1-plugins-bad-free-devel?distro=oraclelinux-7

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Fixed

1.10.4-4.el7_9.tuxcare.els2

source

"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/oraclelinux7els/CLSA-2026-1792423678.json"

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Fixed

1.10.4-4.el7_9.tuxcare.els2

source

"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/oraclelinux7els/CLSA-2026-1792423678.json"