RHSA-2026:8854HighCVSS 8.8

Red Hat Security Advisory: gstreamer1-plugins-bad-free, gstreamer1-plugins-base, gstreamer1-plugins-good, and gstreamer1-plugins-ugly-free security update

Published
April 20, 2026
Last Modified
June 25, 2026

🔗 CVE IDs covered (7)

CVE-2026-2921 →CVE-2026-2922 →CVE-2026-2923 →CVE-2026-3082 →CVE-2026-3083 →CVE-2026-3085 →CVE-2026-2920 →

📋 Description

CVE-2026-2920 — GStreamer: GStreamer: Arbitrary code execution via ASF file processing CVE-2026-2921 — GStreamer: GStreamer: Arbitrary code execution via RIFF palette integer overflow in AVI file handling CVE-2026-2922 — GStreamer: GStreamer: Remote Code Execution via out-of-bounds write in RealMedia Demuxer CVE-2026-2923 — GStreamer: GStreamer: Remote Code Execution via out-of-bounds write in DVB Subtitles handling CVE-2026-3082 — GStreamer: GStreamer: Remote Code Execution via heap-based buffer overflow in JPEG parser CVE-2026-3083 — GStreamer: GStreamer: Remote Code Execution via Out-Of-Bounds Write in rtpqdm2depay CVE-2026-3085 — GStreamer: GStreamer: Remote Code Execution via Heap-based Buffer Overflow in rtpqdm2depay

🔗 References (10)