Skip to content
OpenAdvisories
High WID-SEC-2026-0525 11 CVEs

GStreamer: Mehrere Schwachstellen

Published Feb 25, 2026 · Updated Oct 15, 2026 · Revision 39 · de-DE

Vendor: amazon Vendor: Debian Vendor: IBM Vendor: Oracle Vendor: Red Hat Vendor: RESF Vendor: SUSE Vendor: Ubuntu Product: App Connect Enterprise Product: Enterprise Linux Product: Linux Product: Linux Product: Linux Product: Linux Product: Linux 2 Product: openSUSE Product: Rocky Linux Platform: Linux Platform: Windows

Summary

Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in GStreamer ausnutzen, um einen Denial-of-Service-Zustand zu verursachen, Speicherbeschädigungen durchzuführen und möglicherweise beliebigen Code auszuführen.

Product

GStreamer ist ein Multimedia-Framework mit einer Plugin-basierten Architektur für eine Vielzahl von Plattformen.

Vulnerabilities 11

  • High 8.8
    CVE-2026-3083

    GStreamer rtpqdm2depay Out-Of-Bounds Write Remote Code Execution Vulnerability

    GStreamer rtpqdm2depay Out-Of-Bounds Write Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of GStreamer. Interaction with this library is required to exploit this vulnerabilit…

    GStreamer GStreamer gst-plugins-good1.0 gst-plugins-good1.0 Debian Ubuntu
  • High 8.8
    CVE-2026-3085

    GStreamer rtpqdm2depay Heap-based Buffer Overflow Remote Code Execution Vulnerability

    GStreamer rtpqdm2depay Heap-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of GStreamer. Interaction with this library is required to exploit this vulne…

    GStreamer GStreamer gst-plugins-good1.0 gst-plugins-good1.0 Debian Ubuntu
  • High 7.8
    CVE-2026-2920

    GStreamer ASF Demuxer Heap-based Buffer Overflow Remote Code Execution Vulnerability

    GStreamer ASF Demuxer Heap-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of GStreamer. Interaction with this library is required to exploit this vulner…

    GStreamer GStreamer gst-plugins-ugly1.0 gst-plugins-ugly1.0 Debian Ubuntu
  • High 7.8
    CVE-2026-2921

    GStreamer RIFF Palette Integer Overflow Remote Code Execution Vulnerability

    GStreamer RIFF Palette Integer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of GStreamer. Interaction with this library is required to exploit this vulnerability b…

    GStreamer GStreamer gst-plugins-base1.0 gst-plugins-base1.0 Debian Ubuntu Azure Linux
  • High 7.8
    CVE-2026-2922

    GStreamer RealMedia Demuxer Out-Of-Bounds Write Remote Code Execution Vulnerability

    GStreamer RealMedia Demuxer Out-Of-Bounds Write Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of GStreamer. Interaction with this library is required to exploit this vulnera…

    GStreamer GStreamer gst-plugins-ugly1.0 gst-plugins-ugly1.0 Debian Ubuntu
  • High 7.8
    CVE-2026-2923

    GStreamer DVB Subtitles Out-Of-Bounds Write Remote Code Execution Vulnerability

    GStreamer DVB Subtitles Out-Of-Bounds Write Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of GStreamer. Interaction with this library is required to exploit this vulnerabili…

    GStreamer GStreamer gst-plugins-bad1.0 gst-plugins-bad1.0 Debian Ubuntu
  • High 7.8
    CVE-2026-3081

    GStreamer H.266 Codec Parser Stack-based Buffer Overflow Remote Code Execution Vulnerability

    GStreamer H.266 Codec Parser Stack-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of GStreamer. Interaction with this library is required to exploit thi…

    GStreamer GStreamer gst-plugins-bad1.0 gst-plugins-bad1.0 Debian Ubuntu
  • High 7.8
    CVE-2026-3082

    GStreamer JPEG Parser Heap-based Buffer Overflow Remote Code Execution Vulnerability

    GStreamer JPEG Parser Heap-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of GStreamer. Interaction with this library is required to exploit this vulner…

    GStreamer GStreamer gst-plugins-bad1.0 gst-plugins-bad1.0 Debian Ubuntu
  • High 7.8
    CVE-2026-3084

    GStreamer H.266 Codec Parser Integer Underflow Remote Code Execution Vulnerability

    GStreamer H.266 Codec Parser Integer Underflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of GStreamer. Interaction with this library is required to exploit this vulnerab…

    GStreamer GStreamer gst-plugins-bad1.0 gst-plugins-bad1.0 Debian Ubuntu
  • High 7.8
    CVE-2026-3086

    GStreamer H.266 Codec Parser Out-Of-Bounds Write Remote Code Execution Vulnerability

    GStreamer H.266 Codec Parser Out-Of-Bounds Write Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of GStreamer. Interaction with this library is required to exploit this vulner…

    GStreamer GStreamer gst-plugins-bad1.0 gst-plugins-bad1.0 Debian Ubuntu
  • Medium 5.1
    CVE-2026-1940

    Gstreamer: incomplete fix of cve-2026-1940

    An incomplete fix for CVE-2024-47778 allows an out-of-bounds read in gst_wavparse_adtl_chunk() function. The patch added a size validation check lsize + 8 > size, but it does not account for the GST_ROUND_UP_2(lsize) used in the actual offset calculation. Whe…

    Red Hat Red Hat Enterprise Linux 9 Red Hat Enterprise Linux 8 Red Hat Enterprise Linux 7 Linux Debian Ubuntu

Revision history

  1. #39

    Neue Updates von Debian aufgenommen

  2. #38

    Neue Updates von Oracle Linux aufgenommen

  3. #37

    Neue Updates von Ubuntu aufgenommen

  4. #36

    Neue Updates von Oracle Linux aufgenommen

  5. #35

    Neue Updates von Oracle Linux aufgenommen

  6. #34

    Neue Updates von Oracle Linux aufgenommen

  7. #33

    Neue Updates von Oracle Linux aufgenommen

  8. #32

    Neue Updates von Ubuntu aufgenommen

  9. #31

    Neue Updates von Oracle Linux aufgenommen

  10. #30

    Neue Updates von Oracle Linux aufgenommen

  11. #29

    Referenz(en) aufgenommen: GSTREAMER-SA-2026-0058, GSTREAMER-SA-2026-0064

  12. #28

    Neue Updates von Amazon aufgenommen

  13. #27

    Neue Updates von Oracle Linux aufgenommen

  14. #26

    Neue Updates von Debian aufgenommen

  15. #25

    Neue Updates von Oracle Linux aufgenommen

  16. #24

    Neue Updates von Ubuntu aufgenommen

  17. #23

    Neue Updates von Ubuntu aufgenommen

  18. #22

    Neue Updates von Rocky Enterprise Software Foundation aufgenommen

  19. #21

    Neue Updates von Rocky Enterprise Software Foundation aufgenommen

  20. #20

    Neue Updates von Red Hat aufgenommen

  21. #19

    Neue Updates von Oracle Linux und IBM aufgenommen

  22. #18

    Neue Updates von Amazon aufgenommen

  23. #17

    Neue Updates von Red Hat aufgenommen

  24. #16

    Neue Updates von Red Hat aufgenommen

  25. #15

    Neue Updates von Debian aufgenommen

References