EUVD-2026-50497

GStreamer qtdemux Stack-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of GStreamer. Interaction with this library is required to exploit this vulnerability but attack vectors may vary...

gstreamer1-plugins-bad-free security update

An update is available for gstreamer1-plugins-bad-free. This update affects Rocky Linux 10. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list GStreamer is a streaming media framework based on graphs...

RLSA-2026:47180 Important: gstreamer1-plugins-bad-free security update

GStreamer is a streaming media framework based on graphs of filters which operate on media data. The gstreamer1-plugins-bad-free package contains a collection of plug-ins for GStreamer. Security Fixes: gstreamer: gstreamer: rfbsrc/librfb Hextile heap out-of-bounds write with 16bpp framebuffer...

RHSA-2026:47180 Red Hat Security Advisory: gstreamer1-plugins-bad-free security update

Bulletin has no description...

RHSA-2026:47076 Red Hat Security Advisory: gstreamer1-plugins-bad-free security update

Bulletin has no description...

RHSA-2026:47075 Red Hat Security Advisory: gstreamer1-plugins-bad-free security update

Bulletin has no description...

RHSA-2026:47070 Red Hat Security Advisory: gstreamer1-plugins-bad-free security update

Bulletin has no description...

RHSA-2026:47069 Red Hat Security Advisory: gstreamer1-plugins-bad-free security update

Bulletin has no description...

RHSA-2026:47051 Red Hat Security Advisory: gstreamer1-plugins-good security update

Bulletin has no description...

RHSA-2026:47050 Red Hat Security Advisory: gstreamer1-plugins-good security update

Bulletin has no description...

RHSA-2026:47052 Red Hat Security Advisory: gstreamer1-plugins-good security update

Bulletin has no description...

PT-2026-65956

Name of the Vulnerable Software and Affected Versions GStreamer affected versions not specified Description A Use-After-Free flaw exists in the rtpsbcdepay element during the processing of RTP payload elements. The issue occurs because the software fails to validate the existence of an object...

gstreamer1-plugins-bad-free security update

1.22.12-7.3 - Fix incorrect bytes-per-pixel handling in rfbsrc plugin CVE-2026-59691 Resolves: RHEL-193557 1.22.12-7.2 - Fix buffer overflow in DTLS connection peer certificate subject DN handling CVE-2026-59692 Resolves: RHEL-193572...

PT-2026-65952

GStreamer MRF File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of GStreamer. User interaction is required to exploit this vulnerability in that the target must visit a malicious pag...

Oracle Linux 9 : gstreamer1-plugins-bad-free (ELSA-2026-47179)

The remote Oracle Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-47179 advisory. - Fix incorrect bytes-per-pixel handling in rfbsrc plugin CVE-2026-59691 Resolves: RHEL-193557 Tenable has extracted the preceding description block...

SUSE SLES12: gstreamer-plugins-bad / gstreamer-plugins-bad-devel / etc (SUSE-SU-2026:3299-1)

The remote SUSE Linux SLES12 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:3299-1 advisory. - CVE-2026-12892: 1-byte heap out-of-bounds read in H.264 NAL extension slice parser bsc1268971. - CVE-2026-52720: invalid check of total area...

RockyLinux 10 : gstreamer1-plugins-bad-free (RLSA-2026:47180)

The remote RockyLinux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2026:47180 advisory. gstreamer: gstreamer: rfbsrc/librfb Hextile heap out-of-bounds write with 16bpp framebuffer CVE-2026-59691 gstreamer: gstreamer: DTLS certificate Subje...

Oracle Linux 10 : gstreamer1-plugins-bad-free (ELSA-2026-47180)

The remote Oracle Linux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-47180 advisory. 1.26.7-2.5 - Fix rfbsrc hextile and color read handling for non-32bpp pixel formats CVE-2026-59691 Resolves: RHEL-193550 Tenable has extracted the...

Important: gstreamer1-plugins-bad-free security update

GStreamer is a streaming media framework based on graphs of filters which operate on media data. The gstreamer1-plugins-bad-free package contains a collection of plug-ins for GStreamer. Security Fixes: gstreamer: gstreamer: rfbsrc/librfb Hextile heap out-of-bounds write with 16bpp framebuffer...

PT-2026-65955

Name of the Vulnerable Software and Affected Versions GStreamer affected versions not specified Description A heap-based buffer overflow exists during the parsing of PNG files. The issue occurs because the software fails to properly validate the length of user-supplied data before copying it to a...