CVE-2026-30754

FFmpeg versions prior to 8.1 are susceptible to a memory corruption vulnerability within the RTP encoding process. The issue resides in the nal_send function of libavformat/rtpenc_h264_hevc.c, where a crafted input file can cause a negative size parameter (size=-3) to be passed to memcpy during H...

PT-2026-88459

A memory corruption vulnerability exists in FFmpeg before 8.1. The RTP encoding process. In the nal send function in libavformat/rtpenc h264 hevc.c, a negative size parameter size=-3 is passed to memcpy when transmitting H.264/HEVC streams via RTP using a crafted input file. This was detected usi...

Unity Linux 20.1050a / 20.1060a / 20.1070a Security Update: gstreamer1-plugins-good (UTSA-2026-106456)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-106456 advisory. GStreamer rtpsbcdepay Use-After-Free Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected...

Unity Linux 20.1050a / 20.1060a / 20.1070a Security Update: gstreamer1-plugins-good (UTSA-2026-106459)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-106459 advisory. A flaw was found in the GStreamer gst-plugins-good package. The rtph264depay and rtph265depay RTP depayloader elements do not enforce a maximum size limit on the...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: ffmpeg (UTSA-2026-106169)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-106169 advisory. FFmpeg versions 0.6.3 through 8.1.2 contain an infinite loop vulnerability in the RTP/ASF demuxer within libavformat/rtpdecasf.c that allows remote attackers to caus...

Security update for ffmpeg

This update for ffmpeg fixes the following issues: CVE-2026-64833: out-of-bounds read in the S/PDIF muxer via a crafted DTS stream with a coresize value larger than the actual packet length bsc1272755. CVE-2026-64834: infinite loop in the RTP/ASF demuxer via a crafted RTP/ASF stream bsc1272757...

Moderate: Red Hat Security Advisory: gstreamer1-plugins-good security update

An update for gstreamer1-plugins-good is now available for Red Hat Enterprise Linux 9.6 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, i...

gstreamer1-plugins-good: gst-plugins-good: unbounded memory growth in rtph264depay and rtph265depay RTP depayloaders

A flaw was found in the GStreamer gst-plugins-good package. The rtph264depay and rtph265depay RTP depayloader elements do not enforce a maximum size limit on the reassembly buffer used during fragmented RTP packet processing. A remote, unauthenticated attacker can send a continuous stream of RTP...

PUB-A-492425798

Bulletin has no description...

Moderate: Red Hat Security Advisory: gstreamer1-plugins-good security update

An update for gstreamer1-plugins-good is now available for Red Hat Enterprise Linux 9.4 Update Services for SAP Solutions. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity...

gstreamer1-plugins-good: gst-plugins-good: unbounded memory growth in rtph264depay and rtph265depay RTP depayloaders

A flaw was found in the GStreamer gst-plugins-good package. The rtph264depay and rtph265depay RTP depayloader elements do not enforce a maximum size limit on the reassembly buffer used during fragmented RTP packet processing. A remote, unauthenticated attacker can send a continuous stream of RTP...

Important: gstreamer-plugins-good

Issue Overview: A flaw was found in the GStreamer gst-plugins-good package. The rtph264depay and rtph265depay RTP depayloader elements do not enforce a maximum size limit on the reassembly buffer used during fragmented RTP packet processing. A remote, unauthenticated attacker can send a continuou...

Important: gstreamer1-plugins-good

Issue Overview: GStreamer MRF File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of GStreamer. User interaction is required to exploit this vulnerability in that the target must visit...

Amazon Linux 2023 : gstreamer1-plugins-good, gstreamer1-plugins-good-gtk (ALAS2023-2026-2121)

It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2023-2026-2121 advisory. GStreamer MRF File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of GStreamer...

Amazon Linux 2 : gstreamer1-plugins-good (ALAS-2026-3899)

The version of gstreamer1-plugins-good installed on the remote host is prior to 1.18.4-6. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2-2026-3899 advisory. GStreamer MRF File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability. This vulnerability...

Amazon Linux 2 : gstreamer-plugins-good, --advisory ALAS2-2026-3898 (ALAS-2026-3898)

The version of gstreamer-plugins-good installed on the remote host is prior to 0.10.31-20. It is, therefore, affected by a vulnerability as referenced in the ALAS2-2026-3898 advisory. A flaw was found in the GStreamer gst-plugins-good package. The rtph264depay and rtph265depay RTP depayloader...

Important: gstreamer1-plugins-good

Issue Overview: GStreamer MRF File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of GStreamer. User interaction is required to exploit this vulnerability in that the target must visit...

CVE-2026-75145

A flaw was found in FFmpeg. An incorrect integer narrowing conversion in the AV1 RTP packetizer can lead to an out-of-bounds memory access. This occurs when processing specially crafted AV1 RTP Real-time Transport Protocol packets, where a large OBU Operating Block Unit size is incorrectly handle...

CVE-2026-75144

A flaw was found in FFmpeg. Attackers can trigger memory corruption in the VC-2/Dirac RTP packetizer by supplying a specially crafted Dirac data unit. This heap buffer overflow occurs because the packetizer copies input data into a fixed-size buffer without proper size validation. This can lead t...

CVE-2026-75147

A flaw was found in FFmpeg's AV1 Real-time Transport Protocol RTP packetizer. A local attacker could entice a user to process a crafted AV1 input packet. This crafted packet could cause an out-of-bounds read, potentially leading to information disclosure or a denial of service DoS condition...