GStreamer: Mehrere Schwachstellen

Summary

Product

Vulnerabilities 2

• Medium 6.5
  CVE-2026-100229 Rejected

  No standard GStreamer pipeline element invokes the vulnerable parser API. Exploitation would require a third-party appl…

  gst-plugins-bad1.0 gst-plugins-bad1.0 Debian Ubuntu
  Oct 14, 2026
• Medium 6.1
  CVE-2026-100231

  Gstreamer1-plugins-bad-free: gstreamer1-plugins-bad-free: heap out-of-bounds write in asfmux due to incorrect utf-16 size calculation for non-bmp characters

  A flaw was found in the GStreamer multimedia framework's ASF muxer plugin (asfmux). When writing string metadata tags containing Unicode characters outside the Basic Multilingual Plane (such as emoji) to an ASF container, the plugin incorrectly calculates the…

  Red Hat Red Hat Enterprise Linux 9 Red Hat Enterprise Linux 8 Red Hat Enterprise Linux 7 Linux Debian Ubuntu
  Oct 14, 2026

Revision history

1. 2026-10-14 #1

   Initiale Fassung

References

• GitHub Advisory Database vom 2026-10-14
  https://github.com/advisories/GHSA-QXFV-RJQ3-MG7M
• GitHub Advisory Database vom 2026-10-14
  https://github.com/advisories/GHSA-8G53-2C85-3XHF