CentOS Linux 7 [TuxCare] Security Update: gstreamer1-plugins-bad-free / gstreamer1-plugins-bad-free-devel / etc Multiple Vulnerabilities (CENTOS7:CLSA-2026:1792562667)

The CentOS Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare CENTOS7:CLSA-2026:1792562667 advisory. - GStreamer JPEG Parser Heap-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to...

CLSA-2026-1792562667 gstreamer1-plugins-bad-free: Fix of 2 CVEs

CVE-2026-3082: jpegparser: fix heap buffer overflow by checking the Huffman table length against its storage before copying it - CVE-2026-59692: dtls: fix stack buffer overflow by allocating the buffer for the peer certificate subject DN to its printed length...

CLSA-2026-1792562041 gstreamer1-plugins-bad-free: Fix of 2 CVEs

CVE-2026-3082: jpegparser: fix heap buffer overflow by checking the Huffman table length against its storage before copying it - CVE-2026-59692: dtls: fix stack buffer overflow by allocating the buffer for the peer certificate subject DN to its printed length...

CLSA-2026-1792423678 gstreamer1-plugins-bad-free: Fix of 4 CVEs

CVE-2026-3082: jpegparser: fix heap buffer overflow by checking the Huffman table length against its storage before copying it - CVE-2026-59692: dtls: fix stack buffer overflow by allocating the buffer for the peer certificate subject DN to its printed length...

Oracle Linux 7 : gstreamer1-plugins-bad-free (ELSA-2026-67861)

The remote Oracle Linux 7 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2026-67861 advisory. - Backport fix for CVE-2026-19387 Orabug: 40030729 - Security update for CVE-2026-59691 CVE-2026-59692 Orabug: 39878399 - Security update for CVE-2026-52720...

CVE-2026-100229

An out-of-bounds write vulnerability exists in the GStreamer H.266 codec parser library (libgstcodecparsers ). The flaw is located in the gst_h266_parser_parse_dci() function, where an off-by-one array bound check allows a reserved field value to be incorrectly accepted. This causes the parser to...

CVE-2026-100231 Gstreamer1-plugins-bad-free: gstreamer1-plugins-bad-free: heap out-of-bounds write in asfmux due to incorrect utf-16 size calculation for non-bmp characters

A flaw was found in the GStreamer multimedia framework's ASF muxer plugin asfmux. When writing string metadata tags containing Unicode characters outside the Basic Multilingual Plane such as emoji to an ASF container, the plugin incorrectly calculates the buffer size needed for the UTF-16LE...

CVE-2026-100231 Gstreamer1-plugins-bad-free: gstreamer1-plugins-bad-free: heap out-of-bounds write in asfmux due to incorrect utf-16 size calculation for non-bmp characters

A flaw was found in the GStreamer multimedia framework's ASF muxer plugin asfmux. When writing string metadata tags containing Unicode characters outside the Basic Multilingual Plane such as emoji to an ASF container, the plugin incorrectly calculates the buffer size needed for the UTF-16LE...

CVE-2026-100231

The GStreamer multimedia framework contains a heap out-of-bounds write vulnerability in the asfmux plugin. The root cause is an incorrect buffer size calculation when processing string metadata tags containing Unicode characters outside the Basic Multilingual Plane (such as emojis); the plugin in...

gstreamer1-plugins-bad-free security update

1.10.4-4.0.7 - Backport fix for CVE-2026-19387 Orabug: 40030729 1.10.4-4.0.5 - Security update for CVE-2026-59691 CVE-2026-59692 Orabug: 39878399 1.10.4-4.0.3 - Security update for CVE-2026-52720 CVE-2026-52722 Orabug: 39799399 1.10.4-4.0.1 - Security update for CVE-2026-3082 Orabug: 39199326...

gstreamer1-plugins-bad-free Buffer Error Vulnerability

The gstreamer1-plugins-bad-free vulnerability involves a buffer overflow issue. This vulnerability arises from the incorrect calculation of the buffer size for UTF-16LE representations when writing string metadata tags containing BMP-external Unicode characters into ASF containers. This leads to...

[SECURITY] Fedora 45 Update: gstreamer1-plugins-bad-free-1.28.7-2.fc45

GStreamer is a streaming media framework, based on graphs of elements which operate on media data. This package contains plug-ins that aren't tested well enough, or the code is not of good enough quality...

AlmaLinux 9.2 [TuxCare] Security Update: gstreamer1-plugins-bad-free / gstreamer1-plugins-bad-free-devel (ALMALINUX9.2:CLSA-2026:1776438517)

The AlmaLinux 9.2 host has packages installed that are affected by a vulnerability as referenced in the TuxCare ALMALINUX9.2:CLSA-2026:1776438517 advisory. - GStreamer JPEG Parser Heap-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute...

Rocky Linux 9 [CIQ] Security Update: gstreamer1-plugins-bad-free / gstreamer1-plugins-bad-free-debuginfo / etc (crlsa-2025_8183)

The Rocky Linux 9 host has packages installed that are affected by a vulnerability as referenced in the CIQ crlsa-20258183 advisory. GStreamer: GStreamer H265 Codec Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability CVE-2025-3887 Tenable has extracted the preceding descriptio...

Rocky Linux 10.0 [CIQ] Security Update: gstreamer1-plugins-bad-free / gstreamer1-plugins-bad-free-debuginfo / etc (crlsa-2025_8184)

The Rocky Linux 10.0 host has packages installed that are affected by a vulnerability as referenced in the CIQ crlsa-20258184 advisory. GStreamer: GStreamer H265 Codec Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability CVE-2025-3887 Tenable has extracted the preceding...

Rocky Linux 9.2 [CIQ] Security Update: gstreamer1-plugins-bad-free / gstreamer1-plugins-bad-free-debuginfo / etc Multiple Vulnerabilities (ciqsa-2026_0996)

The Rocky Linux 9.2 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ ciqsa-20260996 advisory. This advisory aggregates security fixes for the gstreamer1-plugins-bad-free SRPM in CIQ LTS 9.2. It addresses 2 CVEs: CVE-2023-44429, CVE-2023-44446...

Rocky Linux 8.8 [CIQ] Security Update: gstreamer1-plugins-bad-free / gstreamer1-plugins-bad-free-debuginfo / etc (ciqsa-2026_0283)

The Rocky Linux 8.8 host has packages installed that are affected by a vulnerability as referenced in the CIQ ciqsa-20260283 advisory. This advisory aggregates security fixes for the gstreamer1-plugins-bad-free SRPM in CIQ LTS 8.8. It addresses 1 CVE: CVE-2023-44446. Tenable has extracted the...

Rocky Linux 9 [CIQ] Security Update: gstreamer1-plugins-bad-free / gstreamer1-plugins-bad-free-debuginfo / etc Multiple Vulnerabilities (crlsa-2024_2287)

The Rocky Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-20242287 advisory. gstreamer-plugins-bad: Integer overflow leading to heap overwrite in MXF file handling with uncompressed video CVE-2023-40474 gstreamer-plugins-bad: Intege...

Rocky Linux 9 [CIQ] Security Update: gstreamer1-plugins-bad-free / gstreamer1-plugins-bad-free-debuginfo / etc Multiple Vulnerabilities (crlsa-2026_47179)

The Rocky Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-202647179 advisory. gstreamer: gstreamer: rfbsrc/librfb Hextile heap out-of-bounds write with 16bpp framebuffer CVE-2026-59691 gstreamer: gstreamer: DTLS certificate Subject ...

Rocky Linux 8 [CIQ] Security Update: gstreamer1-plugins-bad-free / gstreamer1-plugins-bad-free-debuginfo / etc (crlsa-2026_56521)

The Rocky Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CIQ crlsa-202656521 advisory. gstreamer: gstreamer1-plugins-bad-free: gstreamer: heap out-of-bounds write in adpcmdec IMA/DVI ADPCM decoder CVE-2026-19387 Tenable has extracted the preceding...