GStreamer: Mehrere Schwachstellen

Summary

Product

Vulnerabilities 9

• High 8.8
  CVE-2026-52720

  Gstreamer1-plugins-bad-free: gstreamer: heap buffer overflow via crafted vnc server rectangle in librfb

  A heap buffer overflow vulnerability was found in GStreamer's librfb (RFB/VNC client). The rectangle bounds check incorrectly validates area rather than individual dimensions, allowing a malicious VNC server to send a rectangle that extends beyond the framebu…

  Red Hat Red Hat Enterprise Linux 9 Red Hat Enterprise Linux 8 Red Hat Enterprise Linux 6 Linux Debian Ubuntu
  Jun 15, 2026
• High 7.6
  CVE-2026-53705

  Gstreamer1-plugins-good: gstreamer: heap buffer overflow in wavpack decoder via integer overflow

  A flaw was found in GStreamer's WavPack audio decoder in gst-plugins-good. When processing a specially crafted WavPack file, an integer overflow in the buffer size calculation (4 * block_samples * channels) in gst_wavpack_dec_handle_frame() causes a very smal…

  Red Hat Red Hat Enterprise Linux 9 Red Hat Enterprise Linux 8 Red Hat Enterprise Linux 10 Linux Debian Ubuntu
  Jun 15, 2026
• High 7.1
  CVE-2026-52719

  Gstreamer1-plugins-bad-free: gstreamer: out-of-bounds read via jpeg segment length validation in va decoder

  An out-of-bounds read vulnerability was found in the VA JPEG decoder in GStreamer's gst-plugins-bad. The JPEG parser reads a segment length value from the bitstream without validating it against available data. A remote attacker could trick a user into openin…

  Red Hat Red Hat Enterprise Linux 9 Red Hat Enterprise Linux 8 Red Hat Enterprise Linux 7 Linux Debian Ubuntu
  Jun 15, 2026
• High 7.1
  CVE-2026-52722

  Gstreamer1-plugins-bad-free: gstreamer: signed integer overflow in vmnc decoder cursor payload handling

  A signed integer overflow vulnerability was found in GStreamer's VMnc decoder. A crafted VMnc stream with large cursor dimensions can overflow signed integer payload-size arithmetic, bypassing a length check and leading to out-of-bounds reads. A remote attack…

  Red Hat Red Hat Enterprise Linux 9 Red Hat Enterprise Linux 8 Red Hat Enterprise Linux 6 Linux Debian Ubuntu
  Jun 15, 2026
• High 7.1
  CVE-2026-53703

  Gstreamer1-plugins-ugly-free: gstreamer: out-of-bounds read in realmedia demuxer audio stream header parser

  A vulnerability was found in the GStreamer RealMedia demuxer (gst-plugins-ugly). When processing a RealMedia (.rm) file, the demuxer parses MDPR (media properties) chunks to configure audio streams. For audio stream header versions 4 and 5, the parser reads f…

  Red Hat Red Hat Enterprise Linux 9 Red Hat Enterprise Linux 8 Red Hat Enterprise Linux 7 Linux Debian Ubuntu
  Jun 15, 2026
• High 7.1
  CVE-2026-53704

  Gstreamer1-plugins-ugly-free: gstreamer: out-of-bounds read in realmedia demuxer fileinfo metadata parser

  A flaw was found in GStreamer's RealMedia demuxer in the gst-plugins-ugly package. When processing a RealMedia file containing a specially crafted FILEINFO metadata section, the demuxer parses variable-name and variable-value pairs using re_skip_pascal_string…

  Red Hat Red Hat Enterprise Linux 9 Red Hat Enterprise Linux 8 Red Hat Enterprise Linux 7 Linux Debian Ubuntu
  Jun 15, 2026
• Medium 6.5
  CVE-2026-52718

  Gstreamer1-plugins-bad-free: gstreamer: denial of service via av1 tile_list_obu parser byte/bit confusion

  A denial of service vulnerability was found in GStreamer's AV1 codec parser in gst-plugins-bad. The gst_av1_parser_parse_tile_list_obu() function passes a byte count to a bit-reader API that expects a bit count, causing parser desynchronization. A remote atta…

  Red Hat Red Hat Enterprise Linux 9 Red Hat Enterprise Linux 8 Red Hat Enterprise Linux 7 Linux Debian Ubuntu
  Jun 15, 2026
• Medium 6.5
  CVE-2026-53702

  Gstreamer1-plugins-bad-free: gstreamer: stack buffer overflow in h.265 buffering period sei parser

  A stack buffer overflow flaw was found in the GStreamer H.265 codec parser library (gst-plugins-bad). When parsing a buffering period SEI message, the parser uses an incorrect loop bound derived from cpb_cnt_minus1[i] (the loop index) instead of the sub-layer…

  Red Hat Red Hat Enterprise Linux 9 Red Hat Enterprise Linux 8 Red Hat Enterprise Linux 7 Linux Debian Ubuntu
  Jun 11, 2026
• Medium 5.3
  CVE-2026-52721

  Gstreamer1-plugins-bad-free: gstreamer: multiple out-of-bounds reads in pcapparse ipv4/tcp header parsing

  Multiple out-of-bounds read vulnerabilities were found in GStreamer's pcapparse element. Malformed PCAP records can trigger reads beyond buffer boundaries during IPv4/TCP header parsing. This element is primarily used in debugging pipelines, limiting real-wor…

  Red Hat Red Hat Enterprise Linux 9 Red Hat Enterprise Linux 8 Red Hat Enterprise Linux 7 Linux Debian Ubuntu
  Jun 15, 2026

Revision history

1. 2026-10-15 #34

   Neue Updates von Debian aufgenommen

2. 2026-10-14 #33

   Neue Updates von Oracle Linux aufgenommen

3. 2026-10-07 #32

   Neue Updates von Ubuntu aufgenommen

4. 2026-09-09 #31

   Neue Updates von Oracle Linux und SUSE aufgenommen

5. 2026-08-30 #30

   Neue Updates von SUSE aufgenommen

6. 2026-08-27 #29

   Neue Updates von openSUSE aufgenommen

7. 2026-08-23 #28

   Neue Updates von Debian aufgenommen

8. 2026-08-17 #27

   Neue Updates von Oracle Linux aufgenommen

9. 2026-08-13 #26

   Neue Updates von Red Hat aufgenommen

10. 2026-08-12 #25

    Neue Updates von Oracle Linux aufgenommen

11. 2026-08-11 #24

    Neue Updates von SUSE aufgenommen

12. 2026-08-10 #23

    Neue Updates von Oracle Linux aufgenommen

13. 2026-08-09 #22

    Neue Updates von SUSE aufgenommen

14. 2026-08-04 #21

    Neue Updates von Amazon und Red Hat aufgenommen

15. 2026-08-03 #20

    CVE ergänzt

16. 2026-08-02 #19

    Neue Updates von Red Hat aufgenommen

17. 2026-07-29 #18

    Neue Updates von Red Hat aufgenommen

18. 2026-07-28 #17

    Neue Updates von Red Hat aufgenommen

19. 2026-07-27 #16

    Neue Updates von SUSE und Red Hat aufgenommen

20. 2026-07-22 #15

    Neue Updates von Oracle Linux, Ubuntu und SUSE aufgenommen

21. 2026-07-20 #14

    Neue Updates von SUSE aufgenommen

22. 2026-07-15 #13

    Neue Updates von SUSE aufgenommen

23. 2026-07-12 #12

    Neue Updates von Rocky Enterprise Software Foundation und SUSE aufgenommen

24. 2026-07-09 #11

    Neue Updates von Oracle Linux und Rocky Enterprise Software Foundation aufgenommen

25. 2026-07-08 #10

    Neue Updates von Red Hat, openSUSE, Oracle Linux und Rocky Enterprise Software Foundation aufgenommen

References

• SUSE Security Update SUSE-SU-2026:2727-1 vom 2026-07-02
  https://lists.suse.com/pipermail/sle-security-updates/2026-July/027166.html
• GStreamer Security Advisory vom 2026-06-14
  https://gstreamer.freedesktop.org/security/sa-2026-0030.html
• GStreamer Security Advisory vom 2026-06-14
  https://gstreamer.freedesktop.org/security/sa-2026-0031.html
• GStreamer Security Advisory vom 2026-06-14
  https://gstreamer.freedesktop.org/security/sa-2026-0032.html
• GStreamer Security Advisory vom 2026-06-14
  https://gstreamer.freedesktop.org/security/sa-2026-0033.html
• GStreamer Security Advisory vom 2026-06-14
  https://gstreamer.freedesktop.org/security/sa-2026-0034.html
• GStreamer Security Advisory vom 2026-06-14
  https://gstreamer.freedesktop.org/security/sa-2026-0035.html
• GStreamer Security Advisory vom 2026-06-14
  https://gstreamer.freedesktop.org/security/sa-2026-0036.html
• GStreamer Security Advisory vom 2026-06-14
  https://gstreamer.freedesktop.org/security/sa-2026-0037.html
• GStreamer Security Advisory vom 2026-06-14
  https://gstreamer.freedesktop.org/security/sa-2026-0038.html
• GStreamer Security Advisory vom 2026-06-14
  https://gstreamer.freedesktop.org/security/sa-2026-0039.html
• GStreamer Security Advisory vom 2026-06-14
  https://gstreamer.freedesktop.org/security/sa-2026-0040.html
• GStreamer Security Advisory vom 2026-06-14
  https://gstreamer.freedesktop.org/security/sa-2026-0041.html
• GStreamer Security Advisory vom 2026-06-14
  https://gstreamer.freedesktop.org/security/sa-2026-0042.html
• openSUSE Security Update OPENSUSE-SU-2026:21204-1 vom 2026-07-03
  https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/5I5M4HYO7IYSXBZ55NBI5MQCKW3PDVUE/
• SUSE Security Update SUSE-SU-2026:2744-1 vom 2026-07-03
  https://lists.suse.com/pipermail/sle-security-updates/2026-July/027269.html
• SUSE Security Update SUSE-SU-2026:2743-1 vom 2026-07-03
  https://lists.suse.com/pipermail/sle-security-updates/2026-July/027270.html
• Debian Security Advisory DSA-6353 vom 2026-06-19
  https://security-tracker.debian.org/tracker/DSA-6353-1
• Debian Security Advisory DSA-6362 vom 2026-06-23
  https://security-tracker.debian.org/tracker/DSA-6362-1
• openSUSE Security Update OPENSUSE-SU-2026:11088-1 vom 2026-06-24
  https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/D5YVJTVHWZ7AFU6PLNKA7NWHQV2Z2MJO/
• Amazon Linux Security Advisory ALAS2-2026-3791 vom 2026-07-08
  https://alas.aws.amazon.com/AL2/ALAS2-2026-3791.html
• Amazon Linux Security Advisory ALAS2-2026-3787 vom 2026-07-08
  https://alas.aws.amazon.com/AL2/ALAS2-2026-3787.html
• Amazon Linux Security Advisory ALAS2-2026-3790 vom 2026-07-08
  https://alas.aws.amazon.com/AL2/ALAS2-2026-3790.html
• Amazon Linux Security Advisory ALAS2-2026-3788 vom 2026-07-08
  https://alas.aws.amazon.com/AL2/ALAS2-2026-3788.html
• Red Hat Security Advisory RHSA-2026:36673 vom 2026-07-08
  https://access.redhat.com/errata/RHSA-2026:36673
• Red Hat Security Advisory RHSA-2026:36674 vom 2026-07-08
  https://access.redhat.com/errata/RHSA-2026:36674
• Red Hat Security Advisory RHSA-2026:36834 vom 2026-07-09
  https://access.redhat.com/errata/RHSA-2026:36834
• Red Hat Security Advisory RHSA-2026:36774 vom 2026-07-08
  https://access.redhat.com/errata/RHSA-2026:36774
• openSUSE Security Update OPENSUSE-SU-2026:21240-1 vom 2026-07-08
  https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/2CRGH6PNOKJ5KXV7GQOKDEUJ4F7SP5BA/
• Oracle Linux Security Advisory ELSA-2026-36774 vom 2026-07-09
  https://linux.oracle.com/errata/ELSA-2026-36774.html
• Red Hat Security Advisory RHSA-2026:36675 vom 2026-07-08
  https://access.redhat.com/errata/RHSA-2026:36675
• Red Hat Security Advisory RHSA-2026:37130 vom 2026-07-09
  https://access.redhat.com/errata/RHSA-2026:37130
• Red Hat Security Advisory RHSA-2026:36749 vom 2026-07-08
  https://access.redhat.com/errata/RHSA-2026:36749
• Oracle Linux Security Advisory ELSA-2026-36674 vom 2026-07-08
  https://linux.oracle.com/errata/ELSA-2026-36674.html
• Rocky Linux Security Advisory RLSA-2026:36774 vom 2026-07-09
  https://errata.build.resf.org/RLSA-2026:36774
• Oracle Linux Security Advisory ELSA-2026-36834 vom 2026-07-09
  https://linux.oracle.com/errata/ELSA-2026-36834.html
• Oracle Linux Security Advisory ELSA-2026-37130 vom 2026-07-09
  https://linux.oracle.com/errata/ELSA-2026-37130.html
• Oracle Linux Security Advisory ELSA-2026-37129 vom 2026-07-09
  https://linux.oracle.com/errata/ELSA-2026-37129.html
• Rocky Linux Security Advisory RLSA-2026:37130 vom 2026-07-10
  https://errata.build.resf.org/RLSA-2026:37130
• Rocky Linux Security Advisory RLSA-2026:36675 vom 2026-07-10
  https://errata.build.resf.org/RLSA-2026:36675
• SUSE Security Update SUSE-SU-2026:2844-1 vom 2026-07-10
  https://lists.suse.com/pipermail/sle-security-updates/2026-July/027373.html
• SUSE Security Update SUSE-SU-2026:2843-1 vom 2026-07-10
  https://lists.suse.com/pipermail/sle-security-updates/2026-July/027374.html
• SUSE Security Update SUSE-SU-2026:2842-1 vom 2026-07-10
  https://lists.suse.com/pipermail/sle-security-updates/2026-July/027375.html
• Rocky Linux Security Advisory RLSA-2026:36673 vom 2026-07-10
  https://errata.build.resf.org/RLSA-2026:36673
• Rocky Linux Security Advisory RLSA-2026:36674 vom 2026-07-10
  https://errata.build.resf.org/RLSA-2026:36674
• Rocky Linux Security Advisory RLSA-2026:36749 vom 2026-07-10
  https://errata.build.resf.org/RLSA-2026:36749
• Rocky Linux Security Advisory RLSA-2026:36834 vom 2026-07-10
  https://errata.build.resf.org/RLSA-2026:36834
• Rocky Linux Security Advisory RLSA-2026:37129 vom 2026-07-10
  https://errata.build.resf.org/RLSA-2026:37129
• SUSE Security Update SUSE-SU-2026:3058-1 vom 2026-07-15
  https://lists.suse.com/pipermail/sle-security-updates/2026-July/027532.html
• SUSE Security Update SUSE-SU-2026:3133-1 vom 2026-07-20
  https://lists.suse.com/pipermail/sle-security-updates/2026-July/027670.html
• SUSE Security Update SUSE-SU-2026:3125-1 vom 2026-07-20
  https://lists.suse.com/pipermail/sle-security-updates/2026-July/027623.html
• Oracle Linux Security Advisory ELSA-2026-36749 vom 2026-07-22
  https://oss.oracle.com/pipermail/el-errata/2026-July/021228.html
• Oracle Linux Security Advisory ELSA-2026-36675 vom 2026-07-22
  https://oss.oracle.com/pipermail/el-errata/2026-July/021226.html
• Oracle Linux Security Advisory ELSA-2026-36673 vom 2026-07-22
  https://oss.oracle.com/pipermail/el-errata/2026-July/021225.html
• Ubuntu Security Notice USN-8584-1 vom 2026-07-22
  https://ubuntu.com/security/notices/USN-8584-1
• SUSE Security Update SUSE-SU-2026:22752-1 vom 2026-07-22
  https://lists.suse.com/pipermail/sle-security-updates/2026-July/027754.html
• SUSE Security Update SUSE-SU-2026:22817-1 vom 2026-07-27
  https://lists.suse.com/pipermail/sle-security-updates/2026-July/027924.html
• Red Hat Security Advisory RHSA-2026:47032 vom 2026-07-28
  https://access.redhat.com/errata/RHSA-2026:47032
• SUSE Security Update SUSE-SU-2026:3299-1 vom 2026-07-28
  https://lists.suse.com/pipermail/sle-security-updates/2026-July/027956.html
• Red Hat Security Advisory RHSA-2026:47071 vom 2026-07-28
  https://access.redhat.com/errata/RHSA-2026:47071
• Red Hat Security Advisory RHSA-2026:47174 vom 2026-07-28
  https://access.redhat.com/errata/RHSA-2026:47174
• Red Hat Security Advisory RHSA-2026:47176 vom 2026-07-28
  https://access.redhat.com/errata/RHSA-2026:47176
• Red Hat Security Advisory RHSA-2026:47069 vom 2026-07-28
  https://access.redhat.com/errata/RHSA-2026:47069
• Red Hat Security Advisory RHSA-2026:47070 vom 2026-07-28
  https://access.redhat.com/errata/RHSA-2026:47070
• Red Hat Security Advisory RHSA-2026:47050 vom 2026-07-28
  https://access.redhat.com/errata/RHSA-2026:47050
• Red Hat Security Advisory RHSA-2026:47717 vom 2026-07-29
  https://access.redhat.com/errata/RHSA-2026:47717
• Red Hat Security Advisory RHSA-2026:47718 vom 2026-07-29
  https://access.redhat.com/errata/RHSA-2026:47718
• Red Hat Security Advisory RHSA-2026:47075 vom 2026-07-28
  https://access.redhat.com/errata/RHSA-2026:47075
• Red Hat Security Advisory RHSA-2026:47731 vom 2026-07-30
  https://access.redhat.com/errata/RHSA-2026:47731
• Red Hat Security Advisory RHSA-2026:49603 vom 2026-08-03
  https://access.redhat.com/errata/RHSA-2026:49603
• Red Hat Security Advisory RHSA-2026:49604 vom 2026-08-03
  https://access.redhat.com/errata/RHSA-2026:49604
• Red Hat Security Advisory RHSA-2026:49602 vom 2026-08-03
  https://access.redhat.com/errata/RHSA-2026:49602
• Red Hat Security Advisory RHSA-2026:49517 vom 2026-08-03
  https://access.redhat.com/errata/RHSA-2026:49517
• Amazon Linux Security Advisory ALAS2-2026-3832 vom 2026-08-05
  https://alas.aws.amazon.com/AL2/ALAS2-2026-3832.html
• Red Hat Security Advisory RHSA-2026:50691 vom 2026-08-05
  https://access.redhat.com/errata/RHSA-2026:50691
• Red Hat Security Advisory RHSA-2026:50688 vom 2026-08-05
  https://access.redhat.com/errata/RHSA-2026:50688
• SUSE Security Update SUSE-SU-2026:3527-1 vom 2026-08-08
  https://lists.suse.com/pipermail/sle-security-updates/2026-August/028173.html
• Oracle Linux Security Advisory ELSA-2026-47176 vom 2026-08-11
  https://linux.oracle.com/errata/ELSA-2026-47176.html
• SUSE Security Update SUSE-SU-2026:3573-1 vom 2026-08-12
  https://lists.suse.com/pipermail/sle-security-updates/2026-August/028252.html
• Oracle Linux Security Advisory ELSA-2026-49603 vom 2026-08-13
  https://linux.oracle.com/errata/ELSA-2026-49603.html