CVE-2026-18649
Gstreamer1-plugins-good: gst-plugins-good: unbounded memory growth in rtph264depay and rtph265depay rtp depayloaders
A flaw was found in the GStreamer gst-plugins-good package. The rtph264depay and rtph265depay RTP depayloader elements do not enforce a maximum size limit on the reassembly buffer used during fragmented RTP packet processing. A remote, unauthenticated attacker can send a continuous stream of RTP fragments without ever transmitting an end-of-fragment marker, causing the reassembly buffer to grow without bound until process memory is exhausted. This results in a denial of service through process termination.
Attack profile
How easy it is to exploit
- Attack vector
- Network
- Complexity
- Low
- Privileges needed
- None
- User interaction
- None
What an attacker can affect
- Confidentiality
- None
- Integrity
- None
- Availability
- High
Exploit likelihood
What each source reports
CVE List Score used
Gstreamer1-plugins-good: gst-plugins-good: unbounded memory growth in rtph264depay and rtph265depay rtp depayloaders
A flaw was found in the GStreamer gst-plugins-good package. The rtph264depay and rtph265depay RTP depayloader elements do not enforce a maximum size limit on the reassembly buffer used during fragmented RTP packet processing. A remote, unauthenticated attacker can send a continuous stream of RTP fragments without ever transmitting an end-of-fragment marker, causing the reassembly buffer to grow without bound until process memory is exhausted. This results in a denial of service through process termination.
- Record
CVE-2026-18649- CVSS 3.1
- 7.5 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H - Weakness
- CWE-770
- Updated
- 2026-11-02
EUVDEUVD-2026-53768
A flaw was found in the GStreamer gst-plugins-good package. The rtph264depay and rtph265depay RTP depayloader elements do not enforce a maximum size limit on the reassembly buffer used during fragmented RTP packet processing. A remote, unauthenticated attacker can send a continuous stream of RTP fragments without ever transmitting an end-of-fragment marker, causing the reassembly buffer to grow without bound until process memory is exhausted. This results in a denial of service through process termination.
- Record
EUVD-2026-53768- CVSS 3.1
- 7.5 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H - Updated
- 2026-11-02
GitHub AdvisoriesGHSA-wr93-5xph-995g
A flaw was found in the GStreamer gst-plugins-good package. The rtph264depay and rtph265depay RTP...
A flaw was found in the GStreamer gst-plugins-good package. The rtph264depay and rtph265depay RTP depayloader elements do not enforce a maximum size limit on the reassembly buffer used during fragmented RTP packet processing. A remote, unauthenticated attacker can send a continuous stream of RTP fragments without ever transmitting an end-of-fragment marker, causing the reassembly buffer to grow without bound until process memory is exhausted. This results in a denial of service through process termination.
- Record
GHSA-wr93-5xph-995g- CVSS 3.1
- 7.5 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H - Weakness
- CWE-770
- Updated
- 2026-11-02
NVD
A flaw was found in the GStreamer gst-plugins-good package. The rtph264depay and rtph265depay RTP depayloader elements do not enforce a maximum size limit on the reassembly buffer used during fragmented RTP packet processing. A remote, unauthenticated attacker can send a continuous stream of RTP fragments without ever transmitting an end-of-fragment marker, causing the reassembly buffer to grow without bound until process memory is exhausted. This results in a denial of service through process termination.
- Record
CVE-2026-18649- CVSS 3.1
- 7.5 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H - Weakness
- CWE-770
- Updated
- 2026-11-02
OSVDEBIAN-CVE-2026-18649
A flaw was found in the GStreamer gst-plugins-good package. The rtph264depay and rtph265depay RTP depayloader elements do not enforce a maximum size limit on the reassembly buffer used during fragmented RTP packet processing. A remote, unauthenticated attacker can send a continuous stream of RTP fragments without ever transmitting an end-of-fragment marker, causing the reassembly buffer to grow without bound until process memory is exhausted. This results in a denial of service through process termination.
- Record
DEBIAN-CVE-2026-18649- CVSS 3.1
- 7.5 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H - Updated
- 2026-11-02
OSVRHSA-2026:53451
Red Hat Security Advisory: gstreamer1-plugins-good security update
- Record
RHSA-2026:53451- CVSS 3.1
- 7.5 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H - Updated
- 2026-11-02
Show 22 moreShow less
OSVRHSA-2026:53452
Red Hat Security Advisory: gstreamer1-plugins-good security update
- Record
RHSA-2026:53452- CVSS 3.1
- 7.5 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H - Updated
- 2026-11-02
OSVRHSA-2026:56966
Red Hat Security Advisory: gstreamer1-plugins-good security update
- Record
RHSA-2026:56966- CVSS 3.1
- 7.5 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H - Updated
- 2026-11-02
OSVRHSA-2026:61588
Red Hat Security Advisory: gstreamer1-plugins-good security update
- Record
RHSA-2026:61588- CVSS 3.1
- 7.5 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H - Updated
- 2026-11-02
OSVRHSA-2026:61943
Red Hat Security Advisory: gstreamer1-plugins-good security update
- Record
RHSA-2026:61943- CVSS 3.1
- 7.5 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H - Updated
- 2026-11-02
OSVRHSA-2026:65959
Red Hat Security Advisory: gstreamer1-plugins-good security update
- Record
RHSA-2026:65959- CVSS 3.1
- 7.5 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H - Updated
- 2026-11-02
OSVRHSA-2026:65999
Red Hat Security Advisory: gstreamer1-plugins-good security update
- Record
RHSA-2026:65999- CVSS 3.1
- 7.5 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H - Updated
- 2026-11-02
OSVRHSA-2026:69232
Red Hat Security Advisory: gstreamer1-plugins-good security update
- Record
RHSA-2026:69232- CVSS 3.1
- 7.5 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H - Updated
- 2026-11-02
OSVRHSA-2026:70264
Red Hat Security Advisory: gstreamer1-plugins-good security update
- Record
RHSA-2026:70264- CVSS 3.1
- 7.5 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H - Updated
- 2026-11-02
OSVRHSA-2026:70584
Red Hat Security Advisory: gstreamer1-plugins-good security update
- Record
RHSA-2026:70584- CVSS 3.1
- 7.5 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H - Updated
- 2026-11-02
OSVRHSA-2026:70803
Red Hat Security Advisory: gstreamer1-plugins-good security update
- Record
RHSA-2026:70803- CVSS 3.1
- 7.5 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H - Updated
- 2026-11-02
OSVRLSA-2026:53451
Moderate: gstreamer1-plugins-good security update
GStreamer is a streaming media framework based on graphs of filters which operate on media data. The gstreamer1-plugins-good packages contain a collection of well-supported plug-ins of good quality and under the LGPL license.
Security Fix(es):
- gst-plugins-good: gst-plugins-good: unbounded memory growth in rtph264depay and rtph265depay RTP depayloaders (CVE-2026-18649)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
- Record
RLSA-2026:53451- CVSS 3.1
- 7.5 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H - Updated
- 2026-11-02
OSVRLSA-2026:53452
Moderate: gstreamer1-plugins-good security update
GStreamer is a streaming media framework based on graphs of filters which operate on media data. The gstreamer1-plugins-good packages contain a collection of well-supported plug-ins of good quality and under the LGPL license.
Security Fix(es):
- gst-plugins-good: gst-plugins-good: unbounded memory growth in rtph264depay and rtph265depay RTP depayloaders (CVE-2026-18649)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
- Record
RLSA-2026:53452- CVSS 3.1
- 7.5 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H - Updated
- 2026-11-02
OSVRLSA-2026:56966
Moderate: gstreamer1-plugins-good security update
GStreamer is a streaming media framework based on graphs of filters which operate on media data. The gstreamer1-plugins-good packages contain a collection of well-supported plug-ins of good quality and under the LGPL license.
Security Fix(es):
-
gst-plugins-good: gst-plugins-good: unbounded memory growth in rtph264depay and rtph265depay RTP depayloaders (CVE-2026-18649)
-
gstreamer1-plugins-good: gstreamer: unsigned integer underflow in avidemux FUJIFILM strd parsing leading to out-of-bounds read/write (CVE-2026-73433)
-
gstreamer1-plugins-good: gstreamer: out-of-bounds read in avidemux vprp video field descriptor parsing (CVE-2026-73434)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
- Record
RLSA-2026:56966- CVSS 3.1
- 7.5 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H - Updated
- 2026-11-02
OSVUBUNTU-CVE-2026-18649
A flaw was found in the GStreamer gst-plugins-good package. The rtph264depay and rtph265depay RTP depayloader elements do not enforce a maximum size limit on the reassembly buffer used during fragmented RTP packet processing. A remote, unauthenticated attacker can send a continuous stream of RTP fragments without ever transmitting an end-of-fragment marker, causing the reassembly buffer to grow without bound until process memory is exhausted. This results in a denial of service through process termination.
- Record
UBUNTU-CVE-2026-18649- CVSS 3.1
- 7.5 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H - Updated
- 2026-11-02
OSVALSA-2026:53451 No score
Moderate: gstreamer1-plugins-good security update
GStreamer is a streaming media framework based on graphs of filters which operate on media data. The gstreamer1-plugins-good packages contain a collection of well-supported plug-ins of good quality and under the LGPL license.
Security Fix(es):
- gst-plugins-good: gst-plugins-good: unbounded memory growth in rtph264depay and rtph265depay RTP depayloaders (CVE-2026-18649)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
- Record
ALSA-2026:53451- Updated
- 2026-11-02
OSVALSA-2026:53452 No score
Moderate: gstreamer1-plugins-good security update
GStreamer is a streaming media framework based on graphs of filters which operate on media data. The gstreamer1-plugins-good packages contain a collection of well-supported plug-ins of good quality and under the LGPL license.
Security Fix(es):
- gst-plugins-good: gst-plugins-good: unbounded memory growth in rtph264depay and rtph265depay RTP depayloaders (CVE-2026-18649)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
- Record
ALSA-2026:53452- Updated
- 2026-11-02
OSVALSA-2026:56966 No score
Moderate: gstreamer1-plugins-good security update
GStreamer is a streaming media framework based on graphs of filters which operate on media data. The gstreamer1-plugins-good packages contain a collection of well-supported plug-ins of good quality and under the LGPL license.
Security Fix(es):
- gst-plugins-good: gst-plugins-good: unbounded memory growth in rtph264depay and rtph265depay RTP depayloaders (CVE-2026-18649)
- gstreamer1-plugins-good: gstreamer: unsigned integer underflow in avidemux FUJIFILM strd parsing leading to out-of-bounds read/write (CVE-2026-73433)
- gstreamer1-plugins-good: gstreamer: out-of-bounds read in avidemux vprp video field descriptor parsing (CVE-2026-73434)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
- Record
ALSA-2026:56966- Updated
- 2026-11-02
OSVCLSA-2026-1786699059 No score
gstreamer1-plugins-good: Fix of CVE-2026-18649
- CVE-2026-18649: limit the maximum fragmentation unit size in rtph264depay and rtph265depay (rhbz#2510614)
- Record
CLSA-2026-1786699059- Updated
- 2026-11-02
OSVCLSA-2026-1786714360 No score
gstreamer1-plugins-good: Fix of CVE-2026-18649
- CVE-2026-18649: limit H.264 and H.265 RTP fragmentation unit sizes to prevent unbounded memory consumption
- Record
CLSA-2026-1786714360- Updated
- 2026-11-02
OSVROOT-OS-DEBIAN-12-CVE-2026-18649 No score
CVE-2026-18649 in gst-plugins-good1.0 - Patched by Root
Root has patched CVE-2026-18649 in the gst-plugins-good1.0 package for Root:Debian:12. Multiple fixed versions available.
- Record
ROOT-OS-DEBIAN-12-CVE-2026-18649- Updated
- 2026-11-02
OSVROOT-OS-DEBIAN-13-CVE-2026-18649 No score
CVE-2026-18649 in gst-plugins-good1.0 - Patched by Root
Root has patched CVE-2026-18649 in the gst-plugins-good1.0 package for Root:Debian:13. Multiple fixed versions available.
- Record
ROOT-OS-DEBIAN-13-CVE-2026-18649- Updated
- 2026-11-02
OSVUSN-8778-1 No score
gst-plugins-good1.0 vulnerability
It was discovered that GStreamer Good Plugins did not limit the size of reassembly buffers when processing fragmented RTP packets. A remote attacker could possibly use this issue to cause GStreamer Good Plugins to use excessive resources, leading to a denial of service.
- Record
USN-8778-1- Updated
- 2026-11-02
Affected products
- red hat enterprise linux 10
- red hat enterprise linux 10.0 extended update support
- red hat enterprise linux 7 extended lifecycle support
- red hat enterprise linux 8
- red hat enterprise linux 8.4 advanced mission critical update support
- red hat enterprise linux 8.4 extended update support long-life add-on
- red hat enterprise linux 8.6 advanced mission critical update support
- red hat enterprise linux 8.6 extended update support long-life add-on
- red hat enterprise linux 8.8 telecommunications update service
- red hat enterprise linux 8.8 update services for sap solutions
- red hat enterprise linux 9
- red hat enterprise linux 9.2 update services for sap solutions
Affected packages
| Package | Affected | Fixed |
|---|---|---|
gstreamer1-plugins-goodAlmaLinux:10 |
before 1.26.7-2.el10_2.3 | 1.26.7-2.el10_2.3 |
gstreamer1-plugins-good-gtkAlmaLinux:10 |
before 1.26.7-2.el10_2.3 | 1.26.7-2.el10_2.3 |
gstreamer1-plugins-goodAlmaLinux:9 |
before 1.22.12-7.el9_8.2 | 1.22.12-7.el9_8.2 |
gstreamer1-plugins-good-gtkAlmaLinux:9 |
before 1.22.12-7.el9_8.2 | 1.22.12-7.el9_8.2 |
gstreamer1-plugins-goodAlmaLinux:8 From an advisory covering 3 CVEs |
before 1.16.1-7.el8_10.3 | 1.16.1-7.el8_10.3 |
gstreamer1-plugins-good-gtkAlmaLinux:8 From an advisory covering 3 CVEs |
before 1.16.1-7.el8_10.3 | 1.16.1-7.el8_10.3 |
gstreamer1-plugins-goodTuxCare:AlmaLinux:9.6 |
before 1.22.12-4.el9.tuxcare.els3 | 1.22.12-4.el9.tuxcare.els3 |
gstreamer1-plugins-good-gtkTuxCare:AlmaLinux:9.6 |
before 1.22.12-4.el9.tuxcare.els3 | 1.22.12-4.el9.tuxcare.els3 |
gstreamer1-plugins-good-qtTuxCare:AlmaLinux:9.6 |
before 1.22.12-4.el9.tuxcare.els3 | 1.22.12-4.el9.tuxcare.els3 |
gstreamer1-plugins-goodTuxCare:AlmaLinux:9.2 |
before 1.18.4-6.el9.tuxcare.els19 | 1.18.4-6.el9.tuxcare.els19 |
Show 91 moreShow less
| Package | Affected | Fixed |
|---|---|---|
gstreamer1-plugins-good-gtkTuxCare:AlmaLinux:9.2 |
before 1.18.4-6.el9.tuxcare.els19 | 1.18.4-6.el9.tuxcare.els19 |
gstreamer1-plugins-good-qtTuxCare:AlmaLinux:9.2 |
before 1.18.4-6.el9.tuxcare.els19 | 1.18.4-6.el9.tuxcare.els19 |
gst-plugins-good1.0Debian:12 |
All versions, plus listed versions 1.22.0-51.22.0-5+deb12u11.22.0-5+deb12u21.22.0-5+deb12u31.22.1-1 Show 45 moreShow less1.22.10-11.22.3-11.22.3-21.22.4-11.22.5-11.22.6-11.22.7-11.22.8-11.22.8-21.22.8-31.22.9-11.23.1-11.23.2-11.23.90-11.24.0-11.24.1-11.24.1-21.24.10-11.24.11-11.24.11-21.24.11-31.24.11-41.24.11-51.24.12-11.24.2-11.24.3-11.24.4-11.24.5-11.24.6-11.24.7-11.24.8-11.24.9-11.25.1-11.25.1-21.25.1-31.25.50-11.25.90-11.25.90-21.26.0-11.26.1-11.26.10-11.26.2-11.26.3-11.26.4-11.26.5-1 |
None known |
gst-plugins-good1.0Debian:13 |
All versions, plus listed versions 1.26.10-11.26.2-11.26.2-1+deb13u11.26.2-1+deb13u21.26.3-1 Show 27 moreShow less1.26.4-11.26.5-11.26.5-21.26.5-2+hurd.11.26.5-31.26.6-11.26.7-11.26.8-11.26.9-11.27.1-11.27.2-11.27.50-11.27.50-21.27.90-11.28.0-11.28.1-11.28.2-11.28.2-21.28.2-31.28.2-41.28.3-11.28.4-11.28.5-11.28.6-11.28.7-11.29.1-11.29.2-1 |
None known |
gst-plugins-good1.0Debian:14 |
before 1.28.6-1, plus listed versions 1.26.10-11.26.2-11.26.3-11.26.4-11.26.5-1 Show 21 moreShow less1.26.5-21.26.5-2+hurd.11.26.5-31.26.6-11.26.7-11.26.8-11.26.9-11.27.1-11.27.2-11.27.50-11.27.50-21.27.90-11.28.0-11.28.1-11.28.2-11.28.2-21.28.2-31.28.2-41.28.3-11.28.4-11.28.5-1 |
1.28.6-1 |
gstreamer1-plugins-goodRed Hat:enterprise_linux:10.2 |
before 0:1.26.7-2.el10_2.3 | 0:1.26.7-2.el10_2.3 |
gstreamer1-plugins-good-debuginfoRed Hat:enterprise_linux:10.2 |
before 0:1.26.7-2.el10_2.3 | 0:1.26.7-2.el10_2.3 |
gstreamer1-plugins-good-debugsourceRed Hat:enterprise_linux:10.2 |
before 0:1.26.7-2.el10_2.3 | 0:1.26.7-2.el10_2.3 |
gstreamer1-plugins-good-gtkRed Hat:enterprise_linux:10.2 |
before 0:1.26.7-2.el10_2.3 | 0:1.26.7-2.el10_2.3 |
gstreamer1-plugins-good-gtk-debuginfoRed Hat:enterprise_linux:10.2 |
before 0:1.26.7-2.el10_2.3 | 0:1.26.7-2.el10_2.3 |
gstreamer1-plugins-good-qt6-debuginfoRed Hat:enterprise_linux:10.2 |
before 0:1.26.7-2.el10_2.3 | 0:1.26.7-2.el10_2.3 |
gstreamer1-plugins-goodRed Hat:enterprise_linux:9::appstream |
before 0:1.22.12-7.el9_8.2 | 0:1.22.12-7.el9_8.2 |
gstreamer1-plugins-good-debuginfoRed Hat:enterprise_linux:9::appstream |
before 0:1.22.12-7.el9_8.2 | 0:1.22.12-7.el9_8.2 |
gstreamer1-plugins-good-debugsourceRed Hat:enterprise_linux:9::appstream |
before 0:1.22.12-7.el9_8.2 | 0:1.22.12-7.el9_8.2 |
gstreamer1-plugins-good-gtkRed Hat:enterprise_linux:9::appstream |
before 0:1.22.12-7.el9_8.2 | 0:1.22.12-7.el9_8.2 |
gstreamer1-plugins-good-gtk-debuginfoRed Hat:enterprise_linux:9::appstream |
before 0:1.22.12-7.el9_8.2 | 0:1.22.12-7.el9_8.2 |
gstreamer1-plugins-good-qt-debuginfoRed Hat:enterprise_linux:9::appstream |
before 0:1.22.12-7.el9_8.2 | 0:1.22.12-7.el9_8.2 |
gstreamer1-plugins-goodRed Hat:enterprise_linux:8::appstream From an advisory covering 3 CVEs |
before 0:1.16.1-7.el8_10.3 | 0:1.16.1-7.el8_10.3 |
gstreamer1-plugins-good-debuginfoRed Hat:enterprise_linux:8::appstream From an advisory covering 3 CVEs |
before 0:1.16.1-7.el8_10.3 | 0:1.16.1-7.el8_10.3 |
gstreamer1-plugins-good-debugsourceRed Hat:enterprise_linux:8::appstream From an advisory covering 3 CVEs |
before 0:1.16.1-7.el8_10.3 | 0:1.16.1-7.el8_10.3 |
gstreamer1-plugins-good-gtkRed Hat:enterprise_linux:8::appstream From an advisory covering 3 CVEs |
before 0:1.16.1-7.el8_10.3 | 0:1.16.1-7.el8_10.3 |
gstreamer1-plugins-good-gtk-debuginfoRed Hat:enterprise_linux:8::appstream From an advisory covering 3 CVEs |
before 0:1.16.1-7.el8_10.3 | 0:1.16.1-7.el8_10.3 |
gstreamer1-plugins-goodRed Hat:rhel_e4s:9.4::appstream |
before 0:1.22.1-4.el9_4.2 | 0:1.22.1-4.el9_4.2 |
gstreamer1-plugins-good-debuginfoRed Hat:rhel_e4s:9.4::appstream |
before 0:1.22.1-4.el9_4.2 | 0:1.22.1-4.el9_4.2 |
gstreamer1-plugins-good-debugsourceRed Hat:rhel_e4s:9.4::appstream |
before 0:1.22.1-4.el9_4.2 | 0:1.22.1-4.el9_4.2 |
gstreamer1-plugins-good-gtkRed Hat:rhel_e4s:9.4::appstream |
before 0:1.22.1-4.el9_4.2 | 0:1.22.1-4.el9_4.2 |
gstreamer1-plugins-good-gtk-debuginfoRed Hat:rhel_e4s:9.4::appstream |
before 0:1.22.1-4.el9_4.2 | 0:1.22.1-4.el9_4.2 |
gstreamer1-plugins-good-qt-debuginfoRed Hat:rhel_e4s:9.4::appstream |
before 0:1.22.1-4.el9_4.2 | 0:1.22.1-4.el9_4.2 |
gstreamer1-plugins-goodRed Hat:rhel_eus:9.6::appstream |
before 0:1.22.12-5.el9_6.2 | 0:1.22.12-5.el9_6.2 |
gstreamer1-plugins-good-debuginfoRed Hat:rhel_eus:9.6::appstream |
before 0:1.22.12-5.el9_6.2 | 0:1.22.12-5.el9_6.2 |
gstreamer1-plugins-good-debugsourceRed Hat:rhel_eus:9.6::appstream |
before 0:1.22.12-5.el9_6.2 | 0:1.22.12-5.el9_6.2 |
gstreamer1-plugins-good-gtkRed Hat:rhel_eus:9.6::appstream |
before 0:1.22.12-5.el9_6.2 | 0:1.22.12-5.el9_6.2 |
gstreamer1-plugins-good-gtk-debuginfoRed Hat:rhel_eus:9.6::appstream |
before 0:1.22.12-5.el9_6.2 | 0:1.22.12-5.el9_6.2 |
gstreamer1-plugins-good-qt-debuginfoRed Hat:rhel_eus:9.6::appstream |
before 0:1.22.12-5.el9_6.2 | 0:1.22.12-5.el9_6.2 |
gstreamer1-plugins-goodRed Hat:enterprise_linux_eus:10.0 From an advisory covering 3 CVEs |
before 0:1.24.11-1.el10_0.4 | 0:1.24.11-1.el10_0.4 |
gstreamer1-plugins-good-debuginfoRed Hat:enterprise_linux_eus:10.0 From an advisory covering 3 CVEs |
before 0:1.24.11-1.el10_0.4 | 0:1.24.11-1.el10_0.4 |
gstreamer1-plugins-good-debugsourceRed Hat:enterprise_linux_eus:10.0 From an advisory covering 3 CVEs |
before 0:1.24.11-1.el10_0.4 | 0:1.24.11-1.el10_0.4 |
gstreamer1-plugins-good-gtkRed Hat:enterprise_linux_eus:10.0 From an advisory covering 3 CVEs |
before 0:1.24.11-1.el10_0.4 | 0:1.24.11-1.el10_0.4 |
gstreamer1-plugins-good-gtk-debuginfoRed Hat:enterprise_linux_eus:10.0 From an advisory covering 3 CVEs |
before 0:1.24.11-1.el10_0.4 | 0:1.24.11-1.el10_0.4 |
gstreamer1-plugins-good-qt6-debuginfoRed Hat:enterprise_linux_eus:10.0 From an advisory covering 3 CVEs |
before 0:1.24.11-1.el10_0.4 | 0:1.24.11-1.el10_0.4 |
gstreamer1-plugins-goodRed Hat:rhel_e4s:9.2::appstream |
before 0:1.18.4-8.el9_2.2 | 0:1.18.4-8.el9_2.2 |
gstreamer1-plugins-good-debuginfoRed Hat:rhel_e4s:9.2::appstream |
before 0:1.18.4-8.el9_2.2 | 0:1.18.4-8.el9_2.2 |
gstreamer1-plugins-good-debugsourceRed Hat:rhel_e4s:9.2::appstream |
before 0:1.18.4-8.el9_2.2 | 0:1.18.4-8.el9_2.2 |
gstreamer1-plugins-good-gtkRed Hat:rhel_e4s:9.2::appstream |
before 0:1.18.4-8.el9_2.2 | 0:1.18.4-8.el9_2.2 |
gstreamer1-plugins-good-gtk-debuginfoRed Hat:rhel_e4s:9.2::appstream |
before 0:1.18.4-8.el9_2.2 | 0:1.18.4-8.el9_2.2 |
gstreamer1-plugins-good-qt-debuginfoRed Hat:rhel_e4s:9.2::appstream |
before 0:1.18.4-8.el9_2.2 | 0:1.18.4-8.el9_2.2 |
gstreamer1-plugins-goodRed Hat:rhel_e4s:8.8::appstream From an advisory covering 3 CVEs |
before 0:1.16.1-5.el8_8.3 | 0:1.16.1-5.el8_8.3 |
gstreamer1-plugins-good-debuginfoRed Hat:rhel_e4s:8.8::appstream From an advisory covering 3 CVEs |
before 0:1.16.1-5.el8_8.3 | 0:1.16.1-5.el8_8.3 |
gstreamer1-plugins-good-debugsourceRed Hat:rhel_e4s:8.8::appstream From an advisory covering 3 CVEs |
before 0:1.16.1-5.el8_8.3 | 0:1.16.1-5.el8_8.3 |
gstreamer1-plugins-good-gtkRed Hat:rhel_e4s:8.8::appstream From an advisory covering 3 CVEs |
before 0:1.16.1-5.el8_8.3 | 0:1.16.1-5.el8_8.3 |
gstreamer1-plugins-good-gtk-debuginfoRed Hat:rhel_e4s:8.8::appstream From an advisory covering 3 CVEs |
before 0:1.16.1-5.el8_8.3 | 0:1.16.1-5.el8_8.3 |
gstreamer1-plugins-goodRed Hat:rhel_tus:8.8::appstream From an advisory covering 3 CVEs |
before 0:1.16.1-5.el8_8.3 | 0:1.16.1-5.el8_8.3 |
gstreamer1-plugins-good-debuginfoRed Hat:rhel_tus:8.8::appstream From an advisory covering 3 CVEs |
before 0:1.16.1-5.el8_8.3 | 0:1.16.1-5.el8_8.3 |
gstreamer1-plugins-good-debugsourceRed Hat:rhel_tus:8.8::appstream From an advisory covering 3 CVEs |
before 0:1.16.1-5.el8_8.3 | 0:1.16.1-5.el8_8.3 |
gstreamer1-plugins-good-gtkRed Hat:rhel_tus:8.8::appstream From an advisory covering 3 CVEs |
before 0:1.16.1-5.el8_8.3 | 0:1.16.1-5.el8_8.3 |
gstreamer1-plugins-good-gtk-debuginfoRed Hat:rhel_tus:8.8::appstream From an advisory covering 3 CVEs |
before 0:1.16.1-5.el8_8.3 | 0:1.16.1-5.el8_8.3 |
gstreamer1-plugins-goodRed Hat:rhel_els:7 From an advisory covering 3 CVEs |
before 0:1.10.4-4.el7_9.3 | 0:1.10.4-4.el7_9.3 |
gstreamer1-plugins-good-debuginfoRed Hat:rhel_els:7 From an advisory covering 3 CVEs |
before 0:1.10.4-4.el7_9.3 | 0:1.10.4-4.el7_9.3 |
gstreamer1-plugins-goodRed Hat:rhel_aus:8.6::appstream From an advisory covering 3 CVEs |
before 0:1.16.1-4.el8_6.3 | 0:1.16.1-4.el8_6.3 |
gstreamer1-plugins-good-debuginfoRed Hat:rhel_aus:8.6::appstream From an advisory covering 3 CVEs |
before 0:1.16.1-4.el8_6.3 | 0:1.16.1-4.el8_6.3 |
gstreamer1-plugins-good-debugsourceRed Hat:rhel_aus:8.6::appstream From an advisory covering 3 CVEs |
before 0:1.16.1-4.el8_6.3 | 0:1.16.1-4.el8_6.3 |
gstreamer1-plugins-good-gtkRed Hat:rhel_aus:8.6::appstream From an advisory covering 3 CVEs |
before 0:1.16.1-4.el8_6.3 | 0:1.16.1-4.el8_6.3 |
gstreamer1-plugins-good-gtk-debuginfoRed Hat:rhel_aus:8.6::appstream From an advisory covering 3 CVEs |
before 0:1.16.1-4.el8_6.3 | 0:1.16.1-4.el8_6.3 |
gstreamer1-plugins-goodRed Hat:rhel_eus_long_life:8.6::appstream From an advisory covering 3 CVEs |
before 0:1.16.1-4.el8_6.3 | 0:1.16.1-4.el8_6.3 |
gstreamer1-plugins-good-debuginfoRed Hat:rhel_eus_long_life:8.6::appstream From an advisory covering 3 CVEs |
before 0:1.16.1-4.el8_6.3 | 0:1.16.1-4.el8_6.3 |
gstreamer1-plugins-good-debugsourceRed Hat:rhel_eus_long_life:8.6::appstream From an advisory covering 3 CVEs |
before 0:1.16.1-4.el8_6.3 | 0:1.16.1-4.el8_6.3 |
gstreamer1-plugins-good-gtkRed Hat:rhel_eus_long_life:8.6::appstream From an advisory covering 3 CVEs |
before 0:1.16.1-4.el8_6.3 | 0:1.16.1-4.el8_6.3 |
gstreamer1-plugins-good-gtk-debuginfoRed Hat:rhel_eus_long_life:8.6::appstream From an advisory covering 3 CVEs |
before 0:1.16.1-4.el8_6.3 | 0:1.16.1-4.el8_6.3 |
gstreamer1-plugins-goodRed Hat:rhel_aus:8.4::appstream From an advisory covering 3 CVEs |
before 0:1.16.1-4.el8_4.2 | 0:1.16.1-4.el8_4.2 |
gstreamer1-plugins-good-debuginfoRed Hat:rhel_aus:8.4::appstream From an advisory covering 3 CVEs |
before 0:1.16.1-4.el8_4.2 | 0:1.16.1-4.el8_4.2 |
gstreamer1-plugins-good-debugsourceRed Hat:rhel_aus:8.4::appstream From an advisory covering 3 CVEs |
before 0:1.16.1-4.el8_4.2 | 0:1.16.1-4.el8_4.2 |
gstreamer1-plugins-good-gtkRed Hat:rhel_aus:8.4::appstream From an advisory covering 3 CVEs |
before 0:1.16.1-4.el8_4.2 | 0:1.16.1-4.el8_4.2 |
gstreamer1-plugins-good-gtk-debuginfoRed Hat:rhel_aus:8.4::appstream From an advisory covering 3 CVEs |
before 0:1.16.1-4.el8_4.2 | 0:1.16.1-4.el8_4.2 |
gstreamer1-plugins-goodRed Hat:rhel_eus_long_life:8.4::appstream From an advisory covering 3 CVEs |
before 0:1.16.1-4.el8_4.2 | 0:1.16.1-4.el8_4.2 |
gstreamer1-plugins-good-debuginfoRed Hat:rhel_eus_long_life:8.4::appstream From an advisory covering 3 CVEs |
before 0:1.16.1-4.el8_4.2 | 0:1.16.1-4.el8_4.2 |
gstreamer1-plugins-good-debugsourceRed Hat:rhel_eus_long_life:8.4::appstream From an advisory covering 3 CVEs |
before 0:1.16.1-4.el8_4.2 | 0:1.16.1-4.el8_4.2 |
gstreamer1-plugins-good-gtkRed Hat:rhel_eus_long_life:8.4::appstream From an advisory covering 3 CVEs |
before 0:1.16.1-4.el8_4.2 | 0:1.16.1-4.el8_4.2 |
gstreamer1-plugins-good-gtk-debuginfoRed Hat:rhel_eus_long_life:8.4::appstream From an advisory covering 3 CVEs |
before 0:1.16.1-4.el8_4.2 | 0:1.16.1-4.el8_4.2 |
gstreamer1-plugins-goodRocky Linux:10 |
before 0:1.26.7-2.el10_2.3 | 0:1.26.7-2.el10_2.3 |
gstreamer1-plugins-goodRocky Linux:9 |
before 0:1.22.12-7.el9_8.2 | 0:1.22.12-7.el9_8.2 |
gstreamer1-plugins-goodRocky Linux:8 From an advisory covering 3 CVEs |
before 0:1.16.1-7.el8_10.3 | 0:1.16.1-7.el8_10.3 |
gst-plugins-good1.0Root:Debian:12 |
before 1.22.0-5+deb12u4.aikido.3 | 1.22.0-5+deb12u4.aikido.3 |
rootio-gst-plugins-good1.0Root:Debian:12 |
before 1.22.0-5+deb12u4.aikido.3 | 1.22.0-5+deb12u4.aikido.3 |
gst-plugins-good1.0Root:Debian:13 |
before 1.26.2-1+deb13u2.aikido.3 | 1.26.2-1+deb13u2.aikido.3 |
rootio-gst-plugins-good1.0Root:Debian:13 |
before 1.26.2-1+deb13u2.aikido.3 | 1.26.2-1+deb13u2.aikido.3 |
gst-plugins-good1.0Ubuntu:Pro:16.04:LTS |
before 1.8.3-1ubuntu0.5+esm2, plus listed versions 1.6.0-1ubuntu11.6.1-1ubuntu11.6.2-1ubuntu11.7.1-1ubuntu11.7.2-1ubuntu1 Show 11 moreShow less1.7.90-1ubuntu11.7.91-1ubuntu11.8.0-1ubuntu11.8.1-1ubuntu0.11.8.2-1ubuntu0.11.8.2-1ubuntu0.21.8.2-1ubuntu0.31.8.3-1ubuntu0.31.8.3-1ubuntu0.41.8.3-1ubuntu0.51.8.3-1ubuntu0.5+esm1 |
1.8.3-1ubuntu0.5+esm2 |
gst-plugins-good1.0Ubuntu:Pro:18.04:LTS |
before 1.14.5-0ubuntu1~18.04.3+esm2, plus listed versions 1.12.3-1ubuntu11.12.4-1ubuntu11.13.1-1ubuntu11.13.91-1ubuntu11.14.0-1ubuntu1 Show 6 moreShow less1.14.1-1ubuntu1~ubuntu18.04.11.14.4-1ubuntu1~ubuntu18.04.11.14.5-0ubuntu1~18.04.11.14.5-0ubuntu1~18.04.21.14.5-0ubuntu1~18.04.31.14.5-0ubuntu1~18.04.3+esm1 |
1.14.5-0ubuntu1~18.04.3+esm2 |
gst-plugins-good1.0Ubuntu:Pro:20.04:LTS |
before 1.16.3-0ubuntu1.3+esm2, plus listed versions 1.16.1-1ubuntu11.16.2-1ubuntu11.16.2-1ubuntu21.16.2-1ubuntu2.11.16.3-0ubuntu1 Show 4 moreShow less1.16.3-0ubuntu1.11.16.3-0ubuntu1.21.16.3-0ubuntu1.31.16.3-0ubuntu1.3+esm1 |
1.16.3-0ubuntu1.3+esm2 |
gst-plugins-good1.0Ubuntu:22.04:LTS |
before 1.20.3-0ubuntu1.8, plus listed versions 1.18.5-1ubuntu21.18.5-1ubuntu31.20.0-2ubuntu11.20.1-1ubuntu11.20.3-0ubuntu1 Show 6 moreShow less1.20.3-0ubuntu1.11.20.3-0ubuntu1.31.20.3-0ubuntu1.41.20.3-0ubuntu1.51.20.3-0ubuntu1.61.20.3-0ubuntu1.7 |
1.20.3-0ubuntu1.8 |
gst-plugins-good1.0Ubuntu:24.04:LTS |
before 1.24.2-1ubuntu1.6, plus listed versions 1.22.6-1ubuntu11.22.6-1ubuntu21.22.8-3ubuntu11.22.9-1ubuntu11.24.0-1ubuntu5 Show 8 moreShow less1.24.0-1ubuntu71.24.1-2ubuntu11.24.2-1ubuntu11.24.2-1ubuntu1.11.24.2-1ubuntu1.21.24.2-1ubuntu1.31.24.2-1ubuntu1.41.24.2-1ubuntu1.5 |
1.24.2-1ubuntu1.6 |
gst-plugins-good1.0Ubuntu:26.04:LTS |
before 1.28.2-2ubuntu0.2, plus listed versions 1.26.5-1ubuntu21.27.2-1ubuntu11.27.90-1ubuntu11.28.0-1ubuntu11.28.0-1ubuntu31.28.1-1ubuntu11.28.2-21.28.2-2ubuntu0.1 |
1.28.2-2ubuntu0.2 |
Public exploits
Links only. Every CVE stores no exploit code.
| Source | Link | Date |
|---|---|---|
| PoC in GitHub | 0xSemizzz/CVE-2026-18649 | 2026-08-06 |
| PoC in GitHub | C3viche/cve-2026-18649 | 2026-10-31 |
History
| Recorded | Changed | Sources |
|---|---|---|
| affected, facts | ||
| first indexed | CVE List, EUVD, GitHub Advisories, NVD, OSV, PoC in GitHub |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2026-18649 is a high vulnerability (CVSS 7.5) in Red Hat Enterprise Linux 10, published August 6, 2026. Public exploit code exists. EPSS puts the chance of exploitation in the next 30 days at 0.96%, the 61st percentile. Fixed in gstreamer1-plugins-good 1.26.7-2.el10_2.3.
References
0xsemizzz.vercel.app/projects/cve-2026-18649-gstreamer-rtp-dos
access.redhat.com/errata/RHSA-2026:53451
Show 50 moreShow less
bugzilla.redhat.com/show_bug.cgi?id=2510614
github.com/0xSemizzz/CVE-2026-18649
gitlab.freedesktop.org/gstreamer/gstreamer-security/-/merge_requests/113
nvd.nist.gov/vuln/detail/CVE-2026-18649
errata.almalinux.org/10/ALSA-2026-53451.html
errata.tuxcare.com/els_os/tuxcare9.6esu/CLSA-2026-1786699059.html
security-tracker.debian.org/tracker/CVE-2026-18649
security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_53451.json
cve.org/CVERecord?id=CVE-2026-18649
gstreamer.freedesktop.org/security/sa-2026-0072.html
errata.rockylinux.org/RLSA-2026:53451
ubuntu.com/security/CVE-2026-18649
Left out here: 25 versions. The JSON record has them.