Red Hat Security Advisory

RHSA-2026:7673

gstreamer1-plugins-bad-free, gstreamer1-plugins-base, and gstreamer1-plugins-good security update

Released 2026-04-13 · Red Hat rating Important · View on Red Hat →

Fixed in

Red Hat Enterprise Linux Server (v. 7 ELS) gstreamer1-plugins-bad-free-1.10.4-5.el7_9, gstreamer1-plugins-bad-free-1.10.4-5.el7_9.ppc, gstreamer1-plugins-base-1.10.4-4.el7_9 +5
Red Hat Enterprise Linux Server Optional (v. 7 ELS) gstreamer1-plugins-bad-free-devel-1.10.4-5.el7_9, gstreamer1-plugins-bad-free-devel-1.10.4-5.el7_9.ppc, gstreamer1-plugins-bad-free-gtk-1.10.4-5.el7_9 +3

TI-2026-02665 CVE-2026-3085 · GHSA-8wvg-qc85-jr5c

MEDIUM 43

GStreamer rtpqdm2depay Heap-based Buffer Overflow Remote Code Execution Vulnerability.

CVSS 3.0HIGH 8.8 Network No auth User interaction EPSS 0.01338 Published 2026-03-13 Partial fix CWE-122

TI-2026-02663 CVE-2026-3083 · GHSA-xmwv-jrrx-mjgr

MEDIUM 42

GStreamer rtpqdm2depay Out-Of-Bounds Write Remote Code Execution Vulnerability.

CVSS 3.0HIGH 8.8 Network No auth User interaction EPSS 0.00839 Published 2026-03-13 Partial fix CWE-129

TI-2026-02662 CVE-2026-3082 · GHSA-5377-m765-56mv

LOW 38

GStreamer JPEG Parser Heap-based Buffer Overflow Remote Code Execution Vulnerability.

CVSS 3.0HIGH 7.8 Local No auth User interaction EPSS 0.00835 Published 2026-03-13 Partial fix CWE-122

TI-2026-02514 CVE-2026-2921 · GHSA-g7gw-mp9w-623w

LOW 38

GStreamer RIFF Palette Integer Overflow Remote Code Execution Vulnerability.

CVSS 3.0HIGH 7.8 Local No auth User interaction EPSS 0.00902 Published 2026-03-13 Partial fix CWE-190