Skip to content
OpenAdvisories
High ALAS2023-2026-1917 6 CVEs

Important: gstreamer1-plugins-bad-free security update (Amazon Linux 2023)

Published Jul 6, 2026 · Updated Jul 7, 2026

Ecosystem: Amazon Linux

Summary

Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2026-53702: A stack buffer overflow flaw was found in the GStreamer H.265 codec parser library (gst-plugins-bad). When parsing a buffering period SEI message, the parser uses an incorrect loop bound derived from cpb_cnt_minus1[i] (the loop index) instead of the sub-layer 0 CPB count cpb_cnt_minus1[0] from the referenced Sequence Parameter Set. A crafted H.265 video file or stream can cause the parser to write beyond the bounds of stack-allocated CPB delay arrays, resulting in a crash or potential stack memory corruption. CVE-2026-52722: A signed integer overflow vulnerability was found in GStreamer's VMnc decoder. A crafted VMnc stream with large cursor dimensions can overflow signed integer payload-size arithmetic, bypassing a length check and leading to out-of-bounds reads. A remote attacker could trick a user into opening a specially crafted VMnc file, potentially causing a crash or information disclosure. CVE-2026-52721: Multiple out-of-bounds read vulnerabilities were found in GStreamer's pcapparse element. Malformed PCAP records can trigger reads beyond buffer boundaries during IPv4/TCP header parsing. This element is primarily used in debugging pipelines, limiting real-world exposure. A local attacker could trick a user into processing a specially crafted PCAP file, potentially leading to a crash or information disclosure. CVE-2026-52720: A heap buffer overflow vulnerability was found in GStreamer's librfb (RFB/VNC client). The rectangle bounds check incorrectly validates area rather than individual dimensions, allowing a malicious VNC server to send a rectangle that extends beyond the framebuffer. A remote attacker could set up a malicious VNC server and trick a user into connecting, resulting in an out-of-bounds heap write that could lead to code execution or a crash. CVE-2026-52719: An out-of-bounds read vulnerability was found in the VA JPEG decoder in GStreamer's gst-plugins-bad. The JPEG parser reads a segment length value from the bitstream without validating it against available data. A remote attacker could trick a user into opening a specially crafted JPEG file, causing downstream parsing to read beyond the provided input buffer, leading to a crash or potential information disclosure. CVE-2026-52718: A denial of service vulnerability was found in GStreamer's AV1 codec parser in gst-plugins-bad. The gst_av1_parser_parse_tile_list_obu() function passes a byte count to a bit-reader API that expects a bit count, causing parser desynchronization. A remote attacker could trick a user into opening a specially crafted AV1 media file, triggering an assertion abort and causing the application to crash.

Fixed packages 8

ReleasePackageFixed in
Amazon Linux · 2023 gstreamer1-plugin-openh264 0:1.24.10-1.amzn2023.0.6
Amazon Linux · 2023 gstreamer1-plugin-openh264-debuginfo 0:1.24.10-1.amzn2023.0.6
Amazon Linux · 2023 gstreamer1-plugins-bad-free 0:1.24.10-1.amzn2023.0.6
Amazon Linux · 2023 gstreamer1-plugins-bad-free-debuginfo 0:1.24.10-1.amzn2023.0.6
Amazon Linux · 2023 gstreamer1-plugins-bad-free-debugsource 0:1.24.10-1.amzn2023.0.6
Amazon Linux · 2023 gstreamer1-plugins-bad-free-devel 0:1.24.10-1.amzn2023.0.6
Amazon Linux · 2023 gstreamer1-plugins-bad-free-libs 0:1.24.10-1.amzn2023.0.6
Amazon Linux · 2023 gstreamer1-plugins-bad-free-libs-debuginfo 0:1.24.10-1.amzn2023.0.6

Vulnerabilities 6

References

  • web
    https://alas.aws.amazon.com/cve/html/CVE-2026-52718.html
  • web
    https://alas.aws.amazon.com/cve/html/CVE-2026-52719.html
  • web
    https://alas.aws.amazon.com/cve/html/CVE-2026-52720.html
  • web
    https://alas.aws.amazon.com/cve/html/CVE-2026-52721.html
  • web
    https://alas.aws.amazon.com/cve/html/CVE-2026-52722.html
  • web
    https://alas.aws.amazon.com/cve/html/CVE-2026-53702.html