GStreamer: Schwachstelle ermöglicht Offenlegung von Informationen

Summary

Product

Vulnerabilities 1

• Low 3.3
  CVE-2026-17072

  Gstreamer1-plugins-good: gst-plugins-good: 4-byte heap over-read in gst_matroska_parse_flac_stream_headers when parsing flac codec data in matroska containers

  A flaw was found in GStreamer's gst-plugins-good. A heap-based out-of-bounds read of 4 bytes can occur when parsing FLAC audio stream headers embedded in a Matroska or WebM container file. The vulnerability is triggered by a boundary check that does not accou…

  Red Hat Red Hat Enterprise Linux 9 Red Hat Enterprise Linux 8 Red Hat Enterprise Linux 7 Linux Debian Ubuntu
  Jul 28, 2026

Revision history

1. 2026-10-25 #4

   Neue Updates von Amazon aufgenommen

2. 2026-10-15 #3

   Neue Updates von Debian aufgenommen

3. 2026-10-01 #2

   Neue Updates von Ubuntu aufgenommen

4. 2026-07-28 #1

   Initiale Fassung

References

• GitHub Security Advisory GHSA-vx44-4wrp-9hjf vom 2026-07-28
  https://github.com/advisories/GHSA-vx44-4wrp-9hjf
• Ubuntu Security Notice USN-8863-1 vom 2026-10-01
  https://ubuntu.com/security/notices/USN-8863-1
• Debian Security Advisory DLA-4837 vom 2026-10-15
  https://lists.debian.org/debian-lts-announce/2026/10/msg00031.html
• Amazon Linux Security Advisory ALAS2-2026-4024 vom 2026-10-25
  https://alas.aws.amazon.com/AL2/ALAS2-2026-4024.html
• Amazon Linux Security Advisory ALAS2-2026-4023 vom 2026-10-25
  https://alas.aws.amazon.com/AL2/ALAS2-2026-4023.html