Read the docs
Red Hat Security Advisory

RHSA-2026:8874

gstreamer1-plugins-bad-free, gstreamer1-plugins-base, and gstreamer1-plugins-good security update

Released 2026-04-20 · Red Hat rating Important · View on Red Hat →

Fixed in

Fixes 4 records

TI-2026-02665 CVE-2026-3085 · GHSA-8wvg-qc85-jr5c

Heap-based buffer overflow in GStreamer

Priority MEDIUM 43

GStreamer rtpqdm2depay Heap-based Buffer Overflow Remote Code Execution Vulnerability.

CVSS 3.0HIGH 8.8 Network No auth User interaction EPSS 0.01338 Published 2026-03-13 Partial fix CWE-122
TI-2026-02663 CVE-2026-3083 · GHSA-xmwv-jrrx-mjgr

Improper array index validation in GStreamer

Priority MEDIUM 42

GStreamer rtpqdm2depay Out-Of-Bounds Write Remote Code Execution Vulnerability.

CVSS 3.0HIGH 8.8 Network No auth User interaction EPSS 0.00839 Published 2026-03-13 Partial fix CWE-129
TI-2026-02662 CVE-2026-3082 · GHSA-5377-m765-56mv

Heap-based buffer overflow in GStreamer

Priority LOW 38

GStreamer JPEG Parser Heap-based Buffer Overflow Remote Code Execution Vulnerability.

CVSS 3.0HIGH 7.8 Local No auth User interaction EPSS 0.00835 Published 2026-03-13 Partial fix CWE-122
TI-2026-02514 CVE-2026-2921 · GHSA-g7gw-mp9w-623w

Integer overflow in GStreamer

Priority LOW 38

GStreamer RIFF Palette Integer Overflow Remote Code Execution Vulnerability.

CVSS 3.0HIGH 7.8 Local No auth User interaction EPSS 0.00902 Published 2026-03-13 Partial fix CWE-190