Summary
Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in GStreamer ausnutzen, um einen Denial of Service Zustand herbeizuführen, um Informationen offenzulegen und potenziell eine Codeausführung zu erreichen.
Product
GStreamer ist ein Multimedia-Framework mit einer Plugin-basierten Architektur für eine Vielzahl von Plattformen.
Vulnerabilities 1
-
High 8.4CVE-2026-86476 Public exploit
Gstreamer1-plugins-base: gst-plugins-base: heap buffer overflow via unvalidated gstvideometa plane extents in gst_video_frame_map_id and video_meta_deserialize
A flaw was found in gst-plugins-base. A heap buffer overflow can be triggered when processing video buffers whose attached GstVideoMeta metadata declares plane strides and offsets that exceed the actual backing memory allocation. The metadata is not range-che…
Revision history
-
#3
Neue Updates von Red Hat aufgenommen
-
#2
Referenz(en) aufgenommen: EUVD-2026-100950
-
#1
Initiale Fassung
References
-
GStreamer Security Advisory vom 2026-10-08
https://gstreamer.freedesktop.org/security/sa-2026-0078.html
-
GStreamer Security Advisory vom 2026-10-08
https://gstreamer.freedesktop.org/security/sa-2026-0083.html
-
GStreamer Security Advisory vom 2026-10-08
https://gstreamer.freedesktop.org/security/sa-2026-0084.html
-
GStreamer Security Advisory vom 2026-10-08
https://gstreamer.freedesktop.org/security/sa-2026-0085.html
-
GStreamer Security Advisory vom 2026-10-08
https://gstreamer.freedesktop.org/security/sa-2026-0086.html
-
GStreamer Security Advisory vom 2026-10-08
https://gstreamer.freedesktop.org/security/sa-2026-0087.html
-
GStreamer Security Advisory vom 2026-10-08
https://gstreamer.freedesktop.org/security/sa-2026-0088.html
-
GStreamer Security Advisory vom 2026-10-08
https://gstreamer.freedesktop.org/security/sa-2026-0089.html
-
GStreamer Security Advisory vom 2026-10-08
https://gstreamer.freedesktop.org/security/sa-2026-0090.html
-
GStreamer Security Advisory vom 2026-10-08
https://gstreamer.freedesktop.org/security/sa-2026-0091.html
-
GStreamer Security Advisory vom 2026-10-08
https://gstreamer.freedesktop.org/security/sa-2026-0092.html
-
Red Hat Security Advisory RHSA-2026:98600 vom 2026-11-11
https://access.redhat.com/errata/RHSA-2026:98600
-
Red Hat Security Advisory RHSA-2026:99033 vom 2026-11-11
https://access.redhat.com/errata/RHSA-2026:99033