Skip to content
OpenAdvisories
High DLA-4516-1 2 CVEs

gst-plugins-ugly1.0 - security update

Published Mar 30, 2026 · Updated Mar 30, 2026

Ecosystem: Debian

Fixed packages 1

ReleasePackageFixed in
Debian · 11 gst-plugins-ugly1.0 1.18.4-2+deb11u2

Vulnerabilities 2

  • High 7.8
    CVE-2026-2920

    GStreamer ASF Demuxer Heap-based Buffer Overflow Remote Code Execution Vulnerability

    GStreamer ASF Demuxer Heap-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of GStreamer. Interaction with this library is required to exploit this vulner…

    GStreamer GStreamer gst-plugins-ugly1.0 gst-plugins-ugly1.0 Debian Ubuntu
  • High 7.8
    CVE-2026-2922

    GStreamer RealMedia Demuxer Out-Of-Bounds Write Remote Code Execution Vulnerability

    GStreamer RealMedia Demuxer Out-Of-Bounds Write Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of GStreamer. Interaction with this library is required to exploit this vulnera…

    GStreamer GStreamer gst-plugins-ugly1.0 gst-plugins-ugly1.0 Debian Ubuntu