Red Hat Security Advisory

RHSA-2026:71647

gstreamer1-plugins-good security update

Released 2026-09-24 · Red Hat rating Important · View on Red Hat →

Fixed in

Red Hat Enterprise Linux AppStream E4S (v.9.4) gstreamer1-plugins-good-1.22.1-4.el9_4.6, gstreamer1-plugins-good-gtk-1.22.1-4.el9_4.6

TI-2026-15052 CVE-2026-18299 · GHSA-7xww-j5h2-23gh

LOW 35

GStreamer rtpsbcdepay Use-After-Free Remote Code Execution Vulnerability.

CVSS 3.0HIGH 7.8 Local No auth User interaction EPSS 0.00207 Published 2026-08-20 Partial fix CWE-416

TI-2026-15051 CVE-2026-18298 · GHSA-5gr2-2c8f-ph26

LOW 35

GStreamer PNG File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability.

CVSS 3.0HIGH 7.8 Local No auth User interaction EPSS 0.00222 Published 2026-08-20 Partial fix CWE-122

TI-2026-15049 CVE-2026-18296 · GHSA-3h9q-557w-x4r6

LOW 35

GStreamer MRF File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability.

CVSS 3.0HIGH 7.8 Local No auth User interaction EPSS 0.00229 Published 2026-08-20 Partial fix CWE-122

TI-2026-15048 CVE-2026-18295 · GHSA-jfrx-5cmc-xpfv

LOW 35

GStreamer MRF File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability.

CVSS 3.0HIGH 7.8 Local No auth User interaction EPSS 0.00211 Published 2026-08-20 Partial fix CWE-787