Red Hat Security Advisory

RHSA-2026:7850

gstreamer-plugins-base and gstreamer-plugins-good security update

Released 2026-04-13 · Red Hat rating Important · View on Red Hat →

Fixed in

Red Hat Enterprise Linux Server (v. 7 ELS) gstreamer-plugins-base-0.10.36-11.el7_9, gstreamer-plugins-base-0.10.36-11.el7_9.ppc, gstreamer-plugins-good-0.10.31-14.el7_9 +1
Red Hat Enterprise Linux Server Optional (v. 7 ELS) gstreamer-plugins-base-devel-0.10.36-11.el7_9, gstreamer-plugins-base-devel-0.10.36-11.el7_9.ppc, gstreamer-plugins-base-devel-docs-0.10.36-11.el7_9 +2

TI-2026-02665 CVE-2026-3085 · GHSA-8wvg-qc85-jr5c

MEDIUM 43

GStreamer rtpqdm2depay Heap-based Buffer Overflow Remote Code Execution Vulnerability.

CVSS 3.0HIGH 8.8 Network No auth User interaction EPSS 0.01338 Published 2026-03-13 Partial fix CWE-122

TI-2026-02663 CVE-2026-3083 · GHSA-xmwv-jrrx-mjgr

MEDIUM 42

GStreamer rtpqdm2depay Out-Of-Bounds Write Remote Code Execution Vulnerability.

CVSS 3.0HIGH 8.8 Network No auth User interaction EPSS 0.00839 Published 2026-03-13 Partial fix CWE-129

TI-2026-02514 CVE-2026-2921 · GHSA-g7gw-mp9w-623w

LOW 38

GStreamer RIFF Palette Integer Overflow Remote Code Execution Vulnerability.

CVSS 3.0HIGH 7.8 Local No auth User interaction EPSS 0.00902 Published 2026-03-13 Partial fix CWE-190