Red Hat Security Advisory

RHSA-2026:73040

gstreamer1-plugins-good security update

Released 2026-09-29 · Red Hat rating Important · View on Red Hat →

Fixed in

Red Hat Enterprise Linux AppStream E4S (v.8.8) gstreamer1-plugins-good-1.16.1-5.el8_8.6, gstreamer1-plugins-good-gtk-1.16.1-5.el8_8.6
Red Hat Enterprise Linux AppStream TUS (v.8.8) gstreamer1-plugins-good-1.16.1-5.el8_8.6, gstreamer1-plugins-good-gtk-1.16.1-5.el8_8.6

TI-2026-15052 CVE-2026-18299 · GHSA-7xww-j5h2-23gh

LOW 35

GStreamer rtpsbcdepay Use-After-Free Remote Code Execution Vulnerability.

CVSS 3.0HIGH 7.8 Local No auth User interaction EPSS 0.00207 Published 2026-08-20 Partial fix CWE-416

TI-2026-15051 CVE-2026-18298 · GHSA-5gr2-2c8f-ph26

LOW 35

GStreamer PNG File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability.

CVSS 3.0HIGH 7.8 Local No auth User interaction EPSS 0.00222 Published 2026-08-20 Partial fix CWE-122

TI-2026-15049 CVE-2026-18296 · GHSA-3h9q-557w-x4r6

LOW 35

GStreamer MRF File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability.

CVSS 3.0HIGH 7.8 Local No auth User interaction EPSS 0.00229 Published 2026-08-20 Partial fix CWE-122

TI-2026-15048 CVE-2026-18295 · GHSA-jfrx-5cmc-xpfv

LOW 35

GStreamer MRF File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability.

CVSS 3.0HIGH 7.8 Local No auth User interaction EPSS 0.00211 Published 2026-08-20 Partial fix CWE-787