Red Hat Security Advisory

RHSA-2026:9488

gstreamer1-plugins-bad-free, gstreamer1-plugins-base, and gstreamer1-plugins-good security update

Released 2026-04-21 · Red Hat rating Important · View on Red Hat →

Fixed in

Red Hat Enterprise Linux AppStream E4S (v.8.8) gstreamer1-plugins-bad-free-1.16.1-4.el8_8, gstreamer1-plugins-base-1.16.1-4.el8_8, gstreamer1-plugins-base-devel-1.16.1-4.el8_8 +2
Red Hat Enterprise Linux AppStream TUS (v.8.8) gstreamer1-plugins-bad-free-1.16.1-4.el8_8, gstreamer1-plugins-base-1.16.1-4.el8_8, gstreamer1-plugins-base-devel-1.16.1-4.el8_8 +2

TI-2026-02665 CVE-2026-3085 · GHSA-8wvg-qc85-jr5c

MEDIUM 43

GStreamer rtpqdm2depay Heap-based Buffer Overflow Remote Code Execution Vulnerability.

CVSS 3.0HIGH 8.8 Network No auth User interaction EPSS 0.01338 Published 2026-03-13 Partial fix CWE-122

TI-2026-02663 CVE-2026-3083 · GHSA-xmwv-jrrx-mjgr

MEDIUM 42

GStreamer rtpqdm2depay Out-Of-Bounds Write Remote Code Execution Vulnerability.

CVSS 3.0HIGH 8.8 Network No auth User interaction EPSS 0.00839 Published 2026-03-13 Partial fix CWE-129

TI-2026-02662 CVE-2026-3082 · GHSA-5377-m765-56mv

LOW 38

GStreamer JPEG Parser Heap-based Buffer Overflow Remote Code Execution Vulnerability.

CVSS 3.0HIGH 7.8 Local No auth User interaction EPSS 0.00835 Published 2026-03-13 Partial fix CWE-122

TI-2026-02514 CVE-2026-2921 · GHSA-g7gw-mp9w-623w

LOW 38

GStreamer RIFF Palette Integer Overflow Remote Code Execution Vulnerability.

CVSS 3.0HIGH 7.8 Local No auth User interaction EPSS 0.00902 Published 2026-03-13 Partial fix CWE-190