Summary
Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in GStreamer ausnutzen, um beliebigen Programmcode auszuführen, Informationen offenzulegen oder einen Denial of Service zu verursachen.
Product
GStreamer ist ein Multimedia-Framework mit einer Plugin-basierten Architektur für eine Vielzahl von Plattformen.
Vulnerabilities 4
-
High 8.2
Gstreamer1-plugins-good: gstreamer1-plugins-good: out-of-bounds heap read in mtap16/mtap24 h.264 rtp depayloader via signed/unsigned underflow
A flaw was found in GStreamer's gst-plugins-good, specifically in the H.264 RTP depayloader element. When processing MTAP16 or MTAP24 multi-time aggregation RTP packets, a signed/unsigned integer conversion error causes the remaining-length counter to underfl…
-
High 7.5
Gst-plugins-good: gst-plugins-good: local file disclosure via unvalidated file:// uris in adaptivedemux2 manifest handling
A flaw was found in GStreamer's adaptive streaming demuxers (HLS, DASH, MSS). When processing a media playlist or manifest, URIs referenced in the manifest content are fetched without restricting which URI schemes are permitted. An attacker who controls a man…
-
Medium 6.5
Gstreamer1-plugins-bad-free: gst-plugins-bad: use of uninitialized gsth265hrdparams in gst_h265_parse_vps() multi-hrd workaround loop
A flaw was found in GStreamer's gst-plugins-bad package. A use of uninitialized memory vulnerability exists in the H.265 (HEVC) bitstream parser when processing Video Parameter Sets that declare more than one HRD (Hypothetical Reference Decoder) parameter set…
-
Medium 6.1
Gstreamer1-plugins-bad-free: gstreamer1-plugins-bad-free: out-of-bounds read in mxfdemux via unchecked delta_id and slice index
A flaw was found in GStreamer's MXF demuxer plugin (gst-plugins-bad). When processing a specially crafted MXF media file, the demuxer indexes its internal delta-entry and slice-offset tables using values from the file without validating that they are within t…
Revision history
-
#3
Neue Updates von Red Hat aufgenommen
-
#2
Referenz(en) aufgenommen: EUVD-2026-120052, EUVD-2026-120050, EUVD-2026-120051, EUVD-2026-119997
-
#1
Initiale Fassung
References
-
GStreamer Security Advisory vom 2026-11-08
https://gstreamer.freedesktop.org/security/sa-2026-0093.html
-
GStreamer Security Advisory vom 2026-11-08
https://gstreamer.freedesktop.org/security/sa-2026-0094.html
-
GStreamer Security Advisory vom 2026-11-08
https://gstreamer.freedesktop.org/security/sa-2026-0095.html
-
GStreamer Security Advisory vom 2026-11-08
https://gstreamer.freedesktop.org/security/sa-2026-0096.html
-
GStreamer Security Advisory vom 2026-11-08
https://gstreamer.freedesktop.org/security/sa-2026-0097.html
-
GStreamer Security Advisory vom 2026-11-08
https://gstreamer.freedesktop.org/security/sa-2026-0098.html
-
GStreamer Security Advisory vom 2026-11-08
https://gstreamer.freedesktop.org/security/sa-2026-0099.html
-
GStreamer Security Advisory vom 2026-11-08
https://gstreamer.freedesktop.org/security/sa-2026-0100.html
-
GStreamer Security Advisory vom 2026-11-08
https://gstreamer.freedesktop.org/security/sa-2026-0101.html
-
Red Hat Security Advisory RHSA-2026:98644 vom 2026-11-11
https://access.redhat.com/errata/RHSA-2026:98644
-
Red Hat Security Advisory RHSA-2026:99140 vom 2026-11-12
https://access.redhat.com/errata/RHSA-2026:99140