CLSA-2026-1790601978 gstreamer1-plugins-base: Fix of CVE-2026-18297

rebase onto Oracle 1.10.4-2.0.3.el7, which brings the vendor's own backports as Patch1001-Patch1005 - drop 3 of the 4 TuxCare CVE backports in favour of the vendor's copies - CVE-2024-47615: carry the two halves of our backport the vendor omits. Its Patch1003 adds the bounds guards to...

CLSA-2026-1790603589 gstreamer1-plugins-base: Fix of CVE-2026-18297

rebase onto Oracle 1.10.4-2.0.3.el7, which brings the vendor's own backports as Patch1001-Patch1005 - drop 3 of the 4 TuxCare CVE backports in favour of the vendor's copies - CVE-2024-47615: carry the two halves of our backport the vendor omits. Its Patch1003 adds the bounds guards to...

Astra Linux – Vulnerability in gst-plugins-base1.0

GStreamer is a library for constructing graphs of media-handling components. A null pointer dereference vulnerability has been detected in the parselrc function within gstsubparse.c. The parselrc function calls strchr to find the character ‘’ in the string line. The pointer returned by this call ...

Astra Linux – Vulnerability in gst-plugins-base1.0

GStreamer is a library for constructing graphs of media-handling components. A null pointer dereference has been discovered in the id3v2readsynchuint function, located in id3v2.c. If id3v2readsynchuint is called with a null work-hdr.framedata, the pointer guint8 data is accessed without validatio...

CVE-2026-86476

A flaw was found in gst-plugins-base. A heap buffer overflow can be triggered when processing video buffers whose attached GstVideoMeta metadata declares plane strides and offsets that exceed the actual backing memory allocation. The metadata is not range-checked during deserialization, and the...

UBUNTU-CVE-2026-86476

A flaw was found in gst-plugins-base. A heap buffer overflow can be triggered when processing video buffers whose attached GstVideoMeta metadata declares plane strides and offsets that exceed the actual backing memory allocation. The metadata is not range-checked during deserialization, and the...

Oracle Linux 7 : gstreamer1-plugins-base (ELSA-2026-69866)

The remote Oracle Linux 7 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2026-69866 advisory. - Backport fix for CVE-2026-18297 Orabug: 40057731 - Security update for CVE-2026-2921 Orabug: 39199326 Tenable has extracted the preceding description block...

DEBIAN-CVE-2026-86476

A flaw was found in gst-plugins-base. A heap buffer overflow can be triggered when processing video buffers whose attached GstVideoMeta metadata declares plane strides and offsets that exceed the actual backing memory allocation. The metadata is not range-checked during deserialization, and the...

CVE-2026-86476

A flaw was found in gst-plugins-base. A heap buffer overflow can be triggered when processing video buffers whose attached GstVideoMeta metadata declares plane strides and offsets that exceed the actual backing memory allocation. The metadata is not range-checked during deserialization, and the...

CVE-2026-86476

A heap buffer overflow exists in gst-plugins-base within the libgstvideo component. The vulnerability is caused by a failure to range-check GstVideoMeta metadata during deserialization, allowing plane strides and offsets to exceed the actual backing memory allocation. A local attacker controlling...

EUVD-2026-100950

A flaw was found in gst-plugins-base. A heap buffer overflow can be triggered when processing video buffers whose attached GstVideoMeta metadata declares plane strides and offsets that exceed the actual backing memory allocation. The metadata is not range-checked during deserialization, and the...

CVE-2026-86476 Gstreamer1-plugins-base: gst-plugins-base: heap buffer overflow via unvalidated gstvideometa plane extents in gst_video_frame_map_id and video_meta_deserialize

A flaw was found in gst-plugins-base. A heap buffer overflow can be triggered when processing video buffers whose attached GstVideoMeta metadata declares plane strides and offsets that exceed the actual backing memory allocation. The metadata is not range-checked during deserialization, and the...

CVE-2026-86476

A flaw was found in gst-plugins-base. A heap buffer overflow can be triggered when processing video buffers whose attached GstVideoMeta metadata declares plane strides and offsets that exceed the actual backing memory allocation. The metadata is not range-checked during deserialization, and the...

CVE-2026-86476

A flaw was found in gst-plugins-base. A heap buffer overflow can be triggered when processing video buffers whose attached GstVideoMeta metadata declares plane strides and offsets that exceed the actual backing memory allocation. The metadata is not range-checked during deserialization, and the...

PT-2026-113744

Name of the Vulnerable Software and Affected Versions gst-plugins-base affected versions not specified Description A heap buffer overflow occurs when processing video buffers where the attached GstVideoMeta metadata specifies plane strides and offsets that exceed the actual memory allocation. Thi...

CVE-2026-86476: Out-of-bounds Write

A flaw was found in gst-plugins-base. A heap buffer overflow can be triggered when processing video buffers whose attached GstVideoMeta metadata declares plane strides and offsets that exceed the actual backing memory allocation. The metadata is not range-checked during deserialization, and the...

gstreamer1-plugins-base security update

1.10.4-2.0.5 - Backport fix for CVE-2026-18297 Orabug: 40057731 1.10.4-2.0.3 - Security update for CVE-2026-2921 Orabug: 39199326 1.10.4-2.0.1 - Fixed CVE-2024-47607,CVE-2024-47538 and CVE-2024-47615 Orabug: 37407070...

Linux Distros Unpatched Vulnerability : CVE-2026-86476

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A flaw was found in gst-plugins-base. A heap buffer overflow can be triggered when processing video buffers whose attached GstVideoMeta metadata declares plane...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: gstreamer1-plugins-base (UTSA-2026-130054)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-130054 advisory. A NULL pointer dereference flaw was found in GStreamer's RTSP support library. The vulnerability occurs while parsing an Authorization or WWW-Authenticate header tha...

TencentOS Server 3: gstreamer1-plugins-base (TSSA-2026:1121)

The version of Tencent Linux installed on the remote TencentOS Server 3 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the TSSA-2026:1121 advisory. Package updates are available for TencentOS Server 3 that fix the following vulnerabilities:...