Red Hat Security AdvisoryRHSA-2026:8862
gstreamer1-plugins-bad-free, gstreamer1-plugins-base, gstreamer1-plugins-good, and gstreamer1-plugins-ugly-free security update
Released 2026-04-20 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat CodeReady Linux Builder EUS (v.9.6) gstreamer1-plugins-bad-free-devel-1.22.12-5.el9_6
- Red Hat Enterprise Linux AppStream EUS (v.9.6) gstreamer1-plugins-bad-free-1.22.12-5.el9_6, gstreamer1-plugins-bad-free-libs-1.22.12-5.el9_6, gstreamer1-plugins-base-1.22.12-5.el9_6 +5
Fixes 7 records
Priority MEDIUM 43
GStreamer rtpqdm2depay Heap-based Buffer Overflow Remote Code Execution Vulnerability.
CVSS 3.0HIGH 8.8· Network · No auth · User interaction · EPSS 0.01338 · Published 2026-03-13 · Partial fix CWE-122
Priority MEDIUM 42
GStreamer rtpqdm2depay Out-Of-Bounds Write Remote Code Execution Vulnerability.
CVSS 3.0HIGH 8.8· Network · No auth · User interaction · EPSS 0.00839 · Published 2026-03-13 · Partial fix CWE-129
Priority LOW 38
GStreamer JPEG Parser Heap-based Buffer Overflow Remote Code Execution Vulnerability.
CVSS 3.0HIGH 7.8· Local · No auth · User interaction · EPSS 0.00835 · Published 2026-03-13 · Partial fix CWE-122
Priority LOW 38
GStreamer RIFF Palette Integer Overflow Remote Code Execution Vulnerability.
CVSS 3.0HIGH 7.8· Local · No auth · User interaction · EPSS 0.00902 · Published 2026-03-13 · Partial fix CWE-190
Priority LOW 38
GStreamer ASF Demuxer Heap-based Buffer Overflow Remote Code Execution Vulnerability.
CVSS 3.0HIGH 7.8· Local · No auth · User interaction · EPSS 0.00804 · Published 2026-03-13 · Fixed CWE-122
Priority LOW 37
GStreamer DVB Subtitles Out-Of-Bounds Write Remote Code Execution Vulnerability.
CVSS 3.0HIGH 7.8· Local · No auth · User interaction · EPSS 0.00758 · Published 2026-03-13 · Fixed CWE-787
Priority LOW 36
GStreamer RealMedia Demuxer Out-Of-Bounds Write Remote Code Execution Vulnerability.
CVSS 3.0HIGH 7.8· Local · No auth · User interaction · EPSS 0.00448 · Published 2026-03-13 · Partial fix CWE-787