Summary
GStreamer is a streaming media framework based on graphs of filters which operate on media data. The gstreamer1-plugins-bad-free package contains a collection of plug-ins for GStreamer.
Security Fix(es):
* gstreamer1-plugins-bad-free: gstreamer1-plugins-bad-free: stack buffer overflow in H.266/VVC parser (CVE-2026-119777)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Fixed packages 24
| Release | Package | Fixed in |
|---|---|---|
| Rocky Linux · 10 | gstreamer1-plugins-bad-free | 0:1.26.7-9.el10_3.1 |
| Rocky Linux · 10 | gstreamer1-plugins-bad-free | 0:1.26.7-9.el10_3.1 |
| Rocky Linux · 10 | gstreamer1-plugins-bad-free | 0:1.26.7-9.el10_3.1 |
| Rocky Linux · 10 | gstreamer1-plugins-bad-free | 0:1.26.7-9.el10_3.1 |
| Rocky Linux · 10 | gstreamer1-plugins-bad-free-debuginfo | 0:1.26.7-9.el10_3.1 |
| Rocky Linux · 10 | gstreamer1-plugins-bad-free-debuginfo | 0:1.26.7-9.el10_3.1 |
| Rocky Linux · 10 | gstreamer1-plugins-bad-free-debuginfo | 0:1.26.7-9.el10_3.1 |
| Rocky Linux · 10 | gstreamer1-plugins-bad-free-debuginfo | 0:1.26.7-9.el10_3.1 |
| Rocky Linux · 10 | gstreamer1-plugins-bad-free-debugsource | 0:1.26.7-9.el10_3.1 |
| Rocky Linux · 10 | gstreamer1-plugins-bad-free-debugsource | 0:1.26.7-9.el10_3.1 |
| Rocky Linux · 10 | gstreamer1-plugins-bad-free-debugsource | 0:1.26.7-9.el10_3.1 |
| Rocky Linux · 10 | gstreamer1-plugins-bad-free-debugsource | 0:1.26.7-9.el10_3.1 |
| Rocky Linux · 10 | gstreamer1-plugins-bad-free-devel | 0:1.26.7-9.el10_3.1 |
| Rocky Linux · 10 | gstreamer1-plugins-bad-free-devel | 0:1.26.7-9.el10_3.1 |
| Rocky Linux · 10 | gstreamer1-plugins-bad-free-devel | 0:1.26.7-9.el10_3.1 |
| Rocky Linux · 10 | gstreamer1-plugins-bad-free-devel | 0:1.26.7-9.el10_3.1 |
| Rocky Linux · 10 | gstreamer1-plugins-bad-free-libs | 0:1.26.7-9.el10_3.1 |
| Rocky Linux · 10 | gstreamer1-plugins-bad-free-libs | 0:1.26.7-9.el10_3.1 |
| Rocky Linux · 10 | gstreamer1-plugins-bad-free-libs | 0:1.26.7-9.el10_3.1 |
| Rocky Linux · 10 | gstreamer1-plugins-bad-free-libs | 0:1.26.7-9.el10_3.1 |
| Rocky Linux · 10 | gstreamer1-plugins-bad-free-libs-debuginfo | 0:1.26.7-9.el10_3.1 |
| Rocky Linux · 10 | gstreamer1-plugins-bad-free-libs-debuginfo | 0:1.26.7-9.el10_3.1 |
| Rocky Linux · 10 | gstreamer1-plugins-bad-free-libs-debuginfo | 0:1.26.7-9.el10_3.1 |
| Rocky Linux · 10 | gstreamer1-plugins-bad-free-libs-debuginfo | 0:1.26.7-9.el10_3.1 |
Vulnerabilities 1
-
High 8.8
Gstreamer1-plugins-bad-free: gstreamer1-plugins-bad-free: stack buffer overflow in h.266/vvc parser
A flaw was found in GStreamer's gst-plugins-bad H.266/VVC parser. When processing a malformed H.266 media file or stream, an integer overflow while parsing profile, tier, and level fields can lead to a stack-based buffer overflow. An attacker could cause an a…