Read the docs
Red Hat Security Advisory

RHSA-2026:19180

gstreamer1-plugins-bad-free, gstreamer1-plugins-base, gstreamer1-plugins-good, and gstreamer1-plugins-ugly-free security update

Released 2026-05-19 · Red Hat rating Important · View on Red Hat →

Fixed in

Fixes 7 records

TI-2026-02665 CVE-2026-3085 · GHSA-8wvg-qc85-jr5c

Heap-based buffer overflow in GStreamer

Priority MEDIUM 43

GStreamer rtpqdm2depay Heap-based Buffer Overflow Remote Code Execution Vulnerability.

CVSS 3.0HIGH 8.8 Network No auth User interaction EPSS 0.01338 Published 2026-03-13 Partial fix CWE-122
Priority MEDIUM 42

GStreamer rtpqdm2depay Out-Of-Bounds Write Remote Code Execution Vulnerability.

CVSS 3.0HIGH 8.8 Network No auth User interaction EPSS 0.00839 Published 2026-03-13 Partial fix CWE-129
TI-2026-02662 CVE-2026-3082 · GHSA-5377-m765-56mv

Heap-based buffer overflow in GStreamer

Priority LOW 38

GStreamer JPEG Parser Heap-based Buffer Overflow Remote Code Execution Vulnerability.

CVSS 3.0HIGH 7.8 Local No auth User interaction EPSS 0.00835 Published 2026-03-13 Partial fix CWE-122
TI-2026-02514 CVE-2026-2921 · GHSA-g7gw-mp9w-623w

Integer overflow in GStreamer

Priority LOW 38

GStreamer RIFF Palette Integer Overflow Remote Code Execution Vulnerability.

CVSS 3.0HIGH 7.8 Local No auth User interaction EPSS 0.00902 Published 2026-03-13 Partial fix CWE-190
TI-2026-02513 CVE-2026-2920 · GHSA-wj6x-vgpf-cpm6

Heap-based buffer overflow in GStreamer

Priority LOW 38

GStreamer ASF Demuxer Heap-based Buffer Overflow Remote Code Execution Vulnerability.

CVSS 3.0HIGH 7.8 Local No auth User interaction EPSS 0.00804 Published 2026-03-13 Fixed CWE-122
TI-2026-02516 CVE-2026-2923 · GHSA-52ch-r2h3-gxrq

Out-of-bounds write in GStreamer

Priority LOW 37

GStreamer DVB Subtitles Out-Of-Bounds Write Remote Code Execution Vulnerability.

CVSS 3.0HIGH 7.8 Local No auth User interaction EPSS 0.00758 Published 2026-03-13 Fixed CWE-787
TI-2026-02515 CVE-2026-2922 · GHSA-hjx5-q68f-pv56

Out-of-bounds write in GStreamer

Priority LOW 36

GStreamer RealMedia Demuxer Out-Of-Bounds Write Remote Code Execution Vulnerability.

CVSS 3.0HIGH 7.8 Local No auth User interaction EPSS 0.00448 Published 2026-03-13 Partial fix CWE-787