CVE-2026-2922

🗓️ 16 Mar 2026 14:29:25Reported by redhat.comType

redhatcve

redhatcve🔗 access.redhat.com👁 1 Views

CVE-2026-2922 in GStreamer enables remote code execution via RealMedia Demuxer out-of-bounds write.

Reporter	Title	Published	Views	Family All 100
FreeBSD	gstreamer1 -- multiple vulnerabilities	25 Feb 202600:00	–	freebsd
ATTACKERKB	CVE-2026-2922	13 Mar 202620:38	–	attackerkb
Tenable Nessus	AlmaLinux 10 : gstreamer1-plugins-bad-free, gstreamer1-plugins-base, gstreamer1-plugins-good, and gstreamer1-plugins-ugly-free (ALSA-2026:6259)	5 Apr 202600:00	–	nessus
Tenable Nessus	AlmaLinux 9 : gstreamer1-plugins-bad-free, gstreamer1-plugins-base, gstreamer1-plugins-good, and gstreamer1-plugins-ugly-free (ALSA-2026:6300)	5 Apr 202600:00	–	nessus
Tenable Nessus	Debian dla-4516 : gstreamer1.0-plugins-ugly - security update	29 Mar 202600:00	–	nessus
Tenable Nessus	Debian dsa-6191 : gstreamer1.0-plugins-ugly - security update	2 Apr 202600:00	–	nessus
Tenable Nessus	Fedora 42 : mingw-gstreamer1 / mingw-gstreamer1-plugins-bad-free / etc (2026-3cc99e7d09)	5 Apr 202600:00	–	nessus
Tenable Nessus	Fedora 43 : mingw-gstreamer1 / mingw-gstreamer1-plugins-bad-free / etc (2026-e6d8e9fd49)	5 Apr 202600:00	–	nessus
Tenable Nessus	FreeBSD : gstreamer1 -- multiple vulnerabilities (791d4b29-19fb-11f1-87cc-e73692421fef)	7 Mar 202600:00	–	nessus
Tenable Nessus	MiracleLinux 9 : gstreamer1-plugins-bad-free, gstreamer1-plugins-base, gstreamer1-plugins-good, and gstreamer1-plugins-ugly-free (AXSA:2026-421:01)	13 Apr 202600:00	–	nessus

Source	Link
cve	www.cve.org/CVERecord
nvd	www.nvd.nist.gov/vuln/detail/CVE-2026-2922
gitlab	www.gitlab.freedesktop.org/gstreamer/gstreamer/-/commit/88df8d2cd063b95a076e8041b47f778a4402f363
zerodayinitiative	www.zerodayinitiative.com/advisories/ZDI-26-165/
bugzilla	www.bugzilla.redhat.com/show_bug.cgi

16 Mar 2026 14:29Current

6.4Medium risk

Vulners AI Score6.4

CVSS 37.8

CVSS 3.17.8

EPSS0.00108

SSVC

gstreamer realmedia demuxer out of bounds remote code execution untrusted data