Fixed packages 6
| Release | Package | Fixed in |
|---|---|---|
| Red Hat · RHEL 10.2 EUS enterprise_linux_eus:10.2 | gstreamer1-plugins-base | 0:1.26.7-2.el10_2.3 |
| Red Hat · RHEL 10.2 EUS enterprise_linux_eus:10.2 | gstreamer1-plugins-base-debuginfo | 0:1.26.7-2.el10_2.3 |
| Red Hat · RHEL 10.2 EUS enterprise_linux_eus:10.2 | gstreamer1-plugins-base-debugsource | 0:1.26.7-2.el10_2.3 |
| Red Hat · RHEL 10.2 EUS enterprise_linux_eus:10.2 | gstreamer1-plugins-base-devel | 0:1.26.7-2.el10_2.3 |
| Red Hat · RHEL 10.2 EUS enterprise_linux_eus:10.2 | gstreamer1-plugins-base-tools | 0:1.26.7-2.el10_2.3 |
| Red Hat · RHEL 10.2 EUS enterprise_linux_eus:10.2 | gstreamer1-plugins-base-tools-debuginfo | 0:1.26.7-2.el10_2.3 |
Vulnerabilities 1
-
High 8.4CVE-2026-86476 Public exploit
Gstreamer1-plugins-base: gst-plugins-base: heap buffer overflow via unvalidated gstvideometa plane extents in gst_video_frame_map_id and video_meta_deserialize
A flaw was found in gst-plugins-base. A heap buffer overflow can be triggered when processing video buffers whose attached GstVideoMeta metadata declares plane strides and offsets that exceed the actual backing memory allocation. The metadata is not range-che…
References
-
article
https://access.redhat.com/security/updates/classification/#important
-
report
https://bugzilla.redhat.com/show_bug.cgi?id=2529510
-
advisory
https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_99033.json
-
report
https://access.redhat.com/security/cve/CVE-2026-86476
-
advisory
https://www.cve.org/CVERecord?id=CVE-2026-86476
-
advisory
https://nvd.nist.gov/vuln/detail/CVE-2026-86476
-
article
https://redhat.atlassian.net/browse/PSIRTSUPT-23320