Description
GStreamer OGG File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of GStreamer. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file.
The specific flaw exists within the parsing of OGG files. The issue results from the lack of proper validation of the length of user-supplied data prior to copying it to a stack-based buffer. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-29584.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| GStreamer | GStreamer | e3d33ecb5765f11c85b5ba739a0f1cf2bea81abe | — |
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
Debian
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Debian 14 | gst-plugins-base1.0 | 1.28.5-1 | — |
| Debian 13 | gst-plugins-base1.0 | 1.26.2-1+deb13u2 | — |
| Debian 12 | gst-plugins-base1.0 | 1.22.0-3+deb12u7 | — |
Ubuntu
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Ubuntu 26.04 LTS | gst-plugins-base1.0 | 1.28.2-1ubuntu0.1 | USN-8797-1 |
| Ubuntu 24.04 LTS | gst-plugins-base1.0 | 1.24.2-1ubuntu0.5 | USN-8797-1 |
| Ubuntu 22.04 LTS | gst-plugins-base1.0 | 1.20.1-1ubuntu0.7 | USN-8797-1 |
Show 3 more (older releases, extended support, other products)Fewer releases
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Ubuntu Pro 20.04 LTS | gst-plugins-base1.0 | 1.16.3-0ubuntu1.4+esm3 | USN-8797-1 |
| Ubuntu Pro 18.04 LTS | gst-plugins-base1.0 | 1.14.5-0ubuntu1~18.04.3+esm4 | USN-8797-1 |
| Ubuntu Pro 16.04 LTS | gst-plugins-base1.0 | 1.8.3-1ubuntu0.3+esm5 | USN-8797-1 |
Red Hat
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| RHEL 10 | gstreamer1-plugins-base +2 | 1.26.7-2.el10_2.1 | RHSA-2026:59097 |
| RHEL 9 | gstreamer1-plugins-base +2 | 1.22.12-8.el9_8.2 | RHSA-2026:69100 |
| RHEL 8 | gstreamer1-plugins-base +1 | 1.16.1-6.el8_10.1 | RHSA-2026:59487 |
Show 11 more (older releases, extended support, other products)Fewer releases
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| RHEL 10.0 EUS | gstreamer1-plugins-base +2 | 1.24.11-1.el10_0.2 | RHSA-2026:68636 |
| RHEL 9.6 EUS | gstreamer1-plugins-base +2 | 1.22.12-5.el9_6.1 | RHSA-2026:67890 |
| RHEL 9.4 E4S | gstreamer1-plugins-base +2 | 1.22.1-4.el9_4.1 | RHSA-2026:67892 |
| RHEL 9.2 E4S | gstreamer1-plugins-base +2 | 1.18.4-8.el9_2.1 | RHSA-2026:67891 |
| RHEL 8.8 TUS | gstreamer1-plugins-base +1 | 1.16.1-4.el8_8.1 | RHSA-2026:68503 |
| RHEL 8.8 E4S | gstreamer1-plugins-base +1 | 1.16.1-4.el8_8.1 | RHSA-2026:68503 |
| RHEL 8.6 EUS Long Life | gstreamer1-plugins-base +1 | 1.16.1-4.el8_6.1 | RHSA-2026:70260 |
| RHEL 8.6 AUS | gstreamer1-plugins-base +1 | 1.16.1-4.el8_6.1 | RHSA-2026:70260 |
| RHEL 8.4 EUS Long Life | gstreamer1-plugins-base +1 | 1.16.1-4.el8_4.1 | RHSA-2026:69531 |
| RHEL 8.4 AUS | gstreamer1-plugins-base +1 | 1.16.1-4.el8_4.1 | RHSA-2026:69531 |
| RHEL 7 ELS | gstreamer1-plugins-base +3 | 1.10.4-4.el7_9.1 | RHSA-2026:69866 |
AlmaLinux
Errata ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| AlmaLinux 10 | gstreamer1-plugins-base +2 | 1.26.7-2.el10_2.1 | ALSA-2026:59097 |
| AlmaLinux 9 | gstreamer1-plugins-base | 1.22.12-8.el9_8.2 | ALSA-2026:69100 |
| AlmaLinux 8 | gstreamer1-plugins-base +1 | 1.16.1-6.el8_10.1 | ALSA-2026:59487 |
Rocky Linux
Errata ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Rocky Linux 10 | gstreamer1-plugins-base | 1.26.7-2.el10_2.1 | RLSA-2026:59097 |
| Rocky Linux 9 | gstreamer1-plugins-base | 1.22.12-8.el9_8.2 | RLSA-2026:69100 |
| Rocky Linux 8 | gstreamer1-plugins-base | 1.16.1-6.el8_10.1 | RLSA-2026:59487 |
Amazon Linux
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Amazon Linux 2023 | gstreamer1-plugins-base +2 | 1.24.10-1.amzn2023.0.4 | ALAS2023-2026-2158 |
| Amazon Linux 2 | gstreamer1-plugins-base +2 | 1.18.4-5.amzn2.0.11 | ALAS2-2026-3922 |
Azure Linux
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Azure Linux 3 | gstreamer1-plugins-base | No fix yet | — |
Oracle Linux
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Oracle Linux 10 | gstreamer1-plugins-base +2 | 1.26.7-2.el10_2.1 | ELSA-2026-59097 |
| Oracle Linux 9 | gstreamer1-plugins-base +2 | 1.22.12-8.el9_8.2 | ELSA-2026-69100 |
| Oracle Linux 8 | gstreamer1-plugins-base +1 | 1.16.1-6.0.1.el8_10.1 | ELSA-2026-59487 |
| Oracle Linux 7 | gstreamer1-plugins-base +3 | 1.10.4-2.0.5.el7 | ELSA-2026-69866 |
Advisories 25
- WID-SEC-2026-2259 GStreamer: Mehrere Schwachstellen BSI CERT-Bund (WID) · Nov 9, 2026
- ALSA-2026:69100 Important: gstreamer1-plugins-base security update AlmaLinux Security Advisories · Oct 29, 2026
- ALSA-2026:59097 Important: gstreamer1-plugins-base security update AlmaLinux Security Advisories · Oct 29, 2026
- ALSA-2026:59487 Important: gstreamer1-plugins-base security update AlmaLinux Security Advisories · Oct 29, 2026
- ELSA-2026-69866 Important: gstreamer1-plugins-base security update (Oracle Linux 7) Oracle Linux Security Advisories (ELSA) · Oct 14, 2026
- RHSA-2026:70260 Red Hat Security Advisory: gstreamer1-plugins-base security update Red Hat Security Advisories (RHSA) · Sep 23, 2026
- RHSA-2026:69866 Red Hat Security Advisory: gstreamer1-plugins-base security update Red Hat Security Advisories (RHSA) · Sep 23, 2026
- RHSA-2026:69531 Red Hat Security Advisory: gstreamer1-plugins-base security update Red Hat Security Advisories (RHSA) · Sep 23, 2026
- RHSA-2026:69100 Red Hat Security Advisory: gstreamer1-plugins-base security update Red Hat Security Advisories (RHSA) · Sep 23, 2026
- RHSA-2026:68636 Red Hat Security Advisory: gstreamer1-plugins-base security update Red Hat Security Advisories (RHSA) · Sep 23, 2026
- RHSA-2026:68503 Red Hat Security Advisory: gstreamer1-plugins-base security update Red Hat Security Advisories (RHSA) · Sep 23, 2026
- RHSA-2026:67891 Red Hat Security Advisory: gstreamer1-plugins-base security update Red Hat Security Advisories (RHSA) · Sep 23, 2026
- RHSA-2026:67892 Red Hat Security Advisory: gstreamer1-plugins-base security update Red Hat Security Advisories (RHSA) · Sep 23, 2026
- RHSA-2026:67890 Red Hat Security Advisory: gstreamer1-plugins-base security update Red Hat Security Advisories (RHSA) · Sep 23, 2026
- RHSA-2026:59487 Red Hat Security Advisory: gstreamer1-plugins-base security update Red Hat Security Advisories (RHSA) · Sep 23, 2026
- RHSA-2026:59097 Red Hat Security Advisory: gstreamer1-plugins-base security update Red Hat Security Advisories (RHSA) · Sep 23, 2026
- RLSA-2026:69100 Important: gstreamer1-plugins-base security update Rocky Linux Security Advisories · Sep 22, 2026
- USN-8797-1 gst-plugins-base1.0 vulnerability Ubuntu Security Notices (USN) · Sep 22, 2026
- ELSA-2026-69100 Important: gstreamer1-plugins-base security update (Oracle Linux 9) Oracle Linux Security Advisories (ELSA) · Sep 21, 2026
- ALAS2023-2026-2158 Important: gstreamer1-plugins-base security update (Amazon Linux 2023) Amazon Linux Security Center (ALAS) · Sep 14, 2026
- ALAS2-2026-3922 Important: gstreamer1-plugins-base security update (Amazon Linux 2) Amazon Linux Security Center (ALAS) · Sep 14, 2026
- RLSA-2026:59487 Important: gstreamer1-plugins-base security update Rocky Linux Security Advisories · Aug 26, 2026
- RLSA-2026:59097 Important: gstreamer1-plugins-base security update Rocky Linux Security Advisories · Aug 26, 2026
- ELSA-2026-59487 Important: gstreamer1-plugins-base security update (Oracle Linux 8) Oracle Linux Security Advisories (ELSA) · Aug 25, 2026
- ELSA-2026-59097 Important: gstreamer1-plugins-base security update (Oracle Linux 10) Oracle Linux Security Advisories (ELSA) · Aug 24, 2026
References
- ZDI-26-465
- vendor-provided URL vendor-advisory