Skip to content
OpenAdvisories
High USN-8797-1 1 CVE

gst-plugins-base1.0 vulnerability

Published Sep 21, 2026 · Updated Sep 22, 2026

Ecosystem: Ubuntu

Summary

It was discovered that GStreamer Base Plugins incorrectly handled certain
OGG media files. A remote attacker could possibly use this issue to
execute arbitrary code if it opened a specially crafted file.

Fixed packages 6

ReleasePackageFixed in
Ubuntu · 22.04 LTS 22.04:LTS gst-plugins-base1.0 1.20.1-1ubuntu0.7
Ubuntu · 24.04 LTS 24.04:LTS gst-plugins-base1.0 1.24.2-1ubuntu0.5
Ubuntu · 26.04 LTS 26.04:LTS gst-plugins-base1.0 1.28.2-1ubuntu0.1
Ubuntu · Pro 16.04 LTS Pro:16.04:LTS gst-plugins-base1.0 1.8.3-1ubuntu0.3+esm5
Ubuntu · Pro 18.04 LTS Pro:18.04:LTS gst-plugins-base1.0 1.14.5-0ubuntu1~18.04.3+esm4
Ubuntu · Pro 20.04 LTS Pro:20.04:LTS gst-plugins-base1.0 1.16.3-0ubuntu1.4+esm3

Vulnerabilities 1

  • High 7.8
    CVE-2026-18297

    GStreamer OGG File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability

    GStreamer OGG File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of GStreamer. User interaction is required to exploit this vulnerability…

    GStreamer GStreamer gst-plugins-base1.0 gst-plugins-base1.0 Debian Ubuntu Azure Linux

References

  • report
    https://ubuntu.com/security/CVE-2026-18297