{"id":"CVE-2026-18296","aliases":["ALSA-2026:59133","ALSA-2026:59152","ALSA-2026:59179","CLSA-2026-1788197463","CLSA-2026-1788272453","CLSA-2026-1792532772","CLSA-2026-1792532987","CLSA-2026-1792533291","DEBIAN-CVE-2026-18296","EUVD-2026-63445","GHSA-3h9q-557w-x4r6","OESA-2026-4053","OESA-2026-4054","OESA-2026-4055","OESA-2026-4056","RHSA-2026:59133","RHSA-2026:59152","RHSA-2026:59179","RHSA-2026:71646","RHSA-2026:71647","RHSA-2026:71648","RHSA-2026:71650","RHSA-2026:72367","RHSA-2026:72482","RHSA-2026:73040","RHSA-2026:73424","RLSA-2026:59133","RLSA-2026:59152","RLSA-2026:59179","UBUNTU-CVE-2026-18296","USN-8798-1"],"status":"published","title":"GStreamer MRF File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability","description":"GStreamer MRF File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of GStreamer. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file.\n\nThe specific flaw exists within the parsing of MRF files. The issue results from the lack of proper validation of the length of user-supplied data prior to copying it to a heap-based buffer. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-29608.","severity":{"version":"3.0","score":7.8,"vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-09","score":0.00229,"percentile":0.13717,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-122"],"published":"2026-08-20T16:22:07Z","modified":"2026-10-29T11:42:24Z","fixes":[{"ecosystem":"Debian:14","package":"gst-plugins-good1.0","fixed_in":["1.28.5-1"],"sources":["osv"]},{"ecosystem":"Ubuntu:Pro:16.04:LTS","package":"gst-plugins-good1.0","fixed_in":["1.8.3-1ubuntu0.5+esm3"],"sources":["osv"]},{"ecosystem":"Ubuntu:Pro:18.04:LTS","package":"gst-plugins-good1.0","fixed_in":["1.14.5-0ubuntu1~18.04.3+esm3"],"sources":["osv"]},{"ecosystem":"Ubuntu:Pro:20.04:LTS","package":"gst-plugins-good1.0","fixed_in":["1.16.3-0ubuntu1.3+esm3"],"sources":["osv"]},{"ecosystem":"Ubuntu:22.04:LTS","package":"gst-plugins-good1.0","fixed_in":["1.20.3-0ubuntu1.9"],"sources":["osv"]},{"ecosystem":"Ubuntu:24.04:LTS","package":"gst-plugins-good1.0","fixed_in":["1.24.2-1ubuntu1.7"],"sources":["osv"]},{"ecosystem":"Ubuntu:26.04:LTS","package":"gst-plugins-good1.0","fixed_in":["1.28.2-2ubuntu0.3"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"AlmaLinux:10","package":"gstreamer1-plugins-good","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.26.7-2.el10_2.7"}]}],"bundled":3},{"source":"osv","ecosystem":"AlmaLinux:10","package":"gstreamer1-plugins-good-gtk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.26.7-2.el10_2.7"}]}],"bundled":3},{"source":"osv","ecosystem":"AlmaLinux:9","package":"gstreamer1-plugins-good","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.22.12-7.el9_8.8"}]}],"bundled":4},{"source":"osv","ecosystem":"AlmaLinux:9","package":"gstreamer1-plugins-good-gtk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.22.12-7.el9_8.8"}]}],"bundled":4},{"source":"osv","ecosystem":"AlmaLinux:8","package":"gstreamer1-plugins-good","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.16.1-7.el8_10.7"}]}],"bundled":4},{"source":"osv","ecosystem":"AlmaLinux:8","package":"gstreamer1-plugins-good-gtk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.16.1-7.el8_10.7"}]}],"bundled":4},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.6","package":"gstreamer1-plugins-good","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.22.12-4.el9.tuxcare.els5"}]}],"bundled":4},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.6","package":"gstreamer1-plugins-good-gtk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.22.12-4.el9.tuxcare.els5"}]}],"bundled":4},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.6","package":"gstreamer1-plugins-good-qt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.22.12-4.el9.tuxcare.els5"}]}],"bundled":4},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"gstreamer1-plugins-good","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.18.4-6.el9.tuxcare.els20"}]}],"bundled":6},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"gstreamer1-plugins-good-gtk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.18.4-6.el9.tuxcare.els20"}]}],"bundled":6},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"gstreamer1-plugins-good-qt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.18.4-6.el9.tuxcare.els20"}]}],"bundled":6},{"source":"osv","ecosystem":"TuxCare:RHEL:7","package":"gstreamer1-plugins-good","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.10.4-2.0.7.el7.tuxcare.els1"}]}],"bundled":6},{"source":"osv","ecosystem":"TuxCare:OracleLinux:7","package":"gstreamer1-plugins-good","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.10.4-2.0.7.el7_9.tuxcare.els1"}]}],"bundled":6},{"source":"osv","ecosystem":"TuxCare:CentOS:7","package":"gstreamer1-plugins-good","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.10.4-2.0.7.el7.tuxcare.els1"}]}],"bundled":6},{"source":"osv","ecosystem":"Debian:12","package":"gst-plugins-good1.0","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1.22.0-5","1.22.0-5+deb12u1","1.22.0-5+deb12u2","1.22.0-5+deb12u3","1.22.0-5+deb12u4","1.22.1-1","1.22.10-1","1.22.3-1","1.22.3-2","1.22.4-1","1.22.5-1","1.22.6-1","1.22.7-1","1.22.8-1","1.22.8-2","1.22.8-3","1.22.9-1","1.23.1-1","1.23.2-1","1.23.90-1","1.24.0-1","1.24.1-1","1.24.1-2","1.24.10-1","1.24.11-1","1.24.11-2","1.24.11-3","1.24.11-4","1.24.11-5","1.24.12-1","1.24.2-1","1.24.3-1","1.24.4-1","1.24.5-1","1.24.6-1","1.24.7-1","1.24.8-1","1.24.9-1","1.25.1-1","1.25.1-2","1.25.1-3","1.25.50-1","1.25.90-1","1.25.90-2","1.26.0-1","1.26.1-1","1.26.10-1","1.26.2-1","1.26.3-1","1.26.4-1","1.26.5-1","1.26.5-2","1.26.5-2+hurd.1","1.26.5-3","1.26.6-1","1.26.7-1","1.26.8-1","1.26.9-1","1.27.1-1","1.27.2-1","1.27.50-1","1.27.50-2","1.27.90-1","1.28.0-1","1.28.1-1","1.28.2-1","1.28.2-2","1.28.2-3","1.28.2-4","1.28.3-1","1.28.4-1","1.28.5-1","1.28.6-1","1.28.7-1","1.28.8-1","1.29.1-1","1.29.2-1"]},{"source":"osv","ecosystem":"Debian:13","package":"gst-plugins-good1.0","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1.26.10-1","1.26.2-1","1.26.2-1+deb13u1","1.26.2-1+deb13u2","1.26.3-1","1.26.4-1","1.26.5-1","1.26.5-2","1.26.5-2+hurd.1","1.26.5-3","1.26.6-1","1.26.7-1","1.26.8-1","1.26.9-1","1.27.1-1","1.27.2-1","1.27.50-1","1.27.50-2","1.27.90-1","1.28.0-1","1.28.1-1","1.28.2-1","1.28.2-2","1.28.2-3","1.28.2-4","1.28.3-1","1.28.4-1","1.28.5-1","1.28.6-1","1.28.7-1","1.28.8-1","1.29.1-1","1.29.2-1"]},{"source":"osv","ecosystem":"Debian:14","package":"gst-plugins-good1.0","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.28.5-1"}]}],"versions":["1.26.10-1","1.26.2-1","1.26.3-1","1.26.4-1","1.26.5-1","1.26.5-2","1.26.5-2+hurd.1","1.26.5-3","1.26.6-1","1.26.7-1","1.26.8-1","1.26.9-1","1.27.1-1","1.27.2-1","1.27.50-1","1.27.50-2","1.27.90-1","1.28.0-1","1.28.1-1","1.28.2-1","1.28.2-2","1.28.2-3","1.28.2-4","1.28.3-1","1.28.4-1"]},{"source":"osv","ecosystem":"openEuler:24.03-LTS-SP3","package":"gstreamer1-plugins-good","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.20.3-10.oe2403sp3"}]}],"bundled":4},{"source":"osv","ecosystem":"openEuler:24.03-LTS-SP4","package":"gstreamer1-plugins-good","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.20.3-10.oe2403sp4"}]}],"bundled":4},{"source":"osv","ecosystem":"openEuler:22.03-LTS-SP4","package":"gstreamer1-plugins-good","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.16.2-14.oe2203sp4"}]}],"bundled":4},{"source":"osv","ecosystem":"openEuler:24.03-LTS-SP1","package":"gstreamer1-plugins-good","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.20.3-10.oe2403sp1"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.2","package":"gstreamer1-plugins-good","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.26.7-2.el10_2.7"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.2","package":"gstreamer1-plugins-good-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.26.7-2.el10_2.7"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.2","package":"gstreamer1-plugins-good-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.26.7-2.el10_2.7"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.2","package":"gstreamer1-plugins-good-gtk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.26.7-2.el10_2.7"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.2","package":"gstreamer1-plugins-good-gtk-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.26.7-2.el10_2.7"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.2","package":"gstreamer1-plugins-good-qt6-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.26.7-2.el10_2.7"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"gstreamer1-plugins-good","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.22.12-7.el9_8.8"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"gstreamer1-plugins-good-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.22.12-7.el9_8.8"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"gstreamer1-plugins-good-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.22.12-7.el9_8.8"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"gstreamer1-plugins-good-gtk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.22.12-7.el9_8.8"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"gstreamer1-plugins-good-gtk-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.22.12-7.el9_8.8"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"gstreamer1-plugins-good-qt-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.22.12-7.el9_8.8"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"gstreamer1-plugins-good","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.16.1-7.el8_10.7"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"gstreamer1-plugins-good-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.16.1-7.el8_10.7"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"gstreamer1-plugins-good-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.16.1-7.el8_10.7"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"gstreamer1-plugins-good-gtk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.16.1-7.el8_10.7"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"gstreamer1-plugins-good-gtk-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.16.1-7.el8_10.7"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:9.2::appstream","package":"gstreamer1-plugins-good","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.18.4-8.el9_2.6"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:9.2::appstream","package":"gstreamer1-plugins-good-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.18.4-8.el9_2.6"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:9.2::appstream","package":"gstreamer1-plugins-good-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.18.4-8.el9_2.6"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:9.2::appstream","package":"gstreamer1-plugins-good-gtk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.18.4-8.el9_2.6"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:9.2::appstream","package":"gstreamer1-plugins-good-gtk-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.18.4-8.el9_2.6"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:9.2::appstream","package":"gstreamer1-plugins-good-qt-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.18.4-8.el9_2.6"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:9.4::appstream","package":"gstreamer1-plugins-good","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.22.1-4.el9_4.6"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:9.4::appstream","package":"gstreamer1-plugins-good-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.22.1-4.el9_4.6"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:9.4::appstream","package":"gstreamer1-plugins-good-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.22.1-4.el9_4.6"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:9.4::appstream","package":"gstreamer1-plugins-good-gtk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.22.1-4.el9_4.6"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:9.4::appstream","package":"gstreamer1-plugins-good-gtk-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.22.1-4.el9_4.6"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:9.4::appstream","package":"gstreamer1-plugins-good-qt-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.22.1-4.el9_4.6"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.6::appstream","package":"gstreamer1-plugins-good","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.22.12-5.el9_6.6"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.6::appstream","package":"gstreamer1-plugins-good-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.22.12-5.el9_6.6"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.6::appstream","package":"gstreamer1-plugins-good-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.22.12-5.el9_6.6"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.6::appstream","package":"gstreamer1-plugins-good-gtk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.22.12-5.el9_6.6"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.6::appstream","package":"gstreamer1-plugins-good-gtk-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.22.12-5.el9_6.6"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.6::appstream","package":"gstreamer1-plugins-good-qt-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.22.12-5.el9_6.6"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux_eus:10.0","package":"gstreamer1-plugins-good","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.24.11-1.el10_0.7"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux_eus:10.0","package":"gstreamer1-plugins-good-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.24.11-1.el10_0.7"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux_eus:10.0","package":"gstreamer1-plugins-good-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.24.11-1.el10_0.7"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux_eus:10.0","package":"gstreamer1-plugins-good-gtk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.24.11-1.el10_0.7"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux_eus:10.0","package":"gstreamer1-plugins-good-gtk-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.24.11-1.el10_0.7"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux_eus:10.0","package":"gstreamer1-plugins-good-qt6-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.24.11-1.el10_0.7"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhel_els:7","package":"gstreamer1-plugins-good","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.10.4-4.el7_9.6"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhel_els:7","package":"gstreamer1-plugins-good-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.10.4-4.el7_9.6"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.6::appstream","package":"gstreamer1-plugins-good","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.16.1-4.el8_6.6"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.6::appstream","package":"gstreamer1-plugins-good-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.16.1-4.el8_6.6"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.6::appstream","package":"gstreamer1-plugins-good-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.16.1-4.el8_6.6"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.6::appstream","package":"gstreamer1-plugins-good-gtk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.16.1-4.el8_6.6"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.6::appstream","package":"gstreamer1-plugins-good-gtk-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.16.1-4.el8_6.6"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhel_eus_long_life:8.6::appstream","package":"gstreamer1-plugins-good","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.16.1-4.el8_6.6"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhel_eus_long_life:8.6::appstream","package":"gstreamer1-plugins-good-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.16.1-4.el8_6.6"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhel_eus_long_life:8.6::appstream","package":"gstreamer1-plugins-good-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.16.1-4.el8_6.6"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhel_eus_long_life:8.6::appstream","package":"gstreamer1-plugins-good-gtk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.16.1-4.el8_6.6"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhel_eus_long_life:8.6::appstream","package":"gstreamer1-plugins-good-gtk-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.16.1-4.el8_6.6"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.8::appstream","package":"gstreamer1-plugins-good","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.16.1-5.el8_8.6"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.8::appstream","package":"gstreamer1-plugins-good-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.16.1-5.el8_8.6"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.8::appstream","package":"gstreamer1-plugins-good-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.16.1-5.el8_8.6"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.8::appstream","package":"gstreamer1-plugins-good-gtk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.16.1-5.el8_8.6"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.8::appstream","package":"gstreamer1-plugins-good-gtk-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.16.1-5.el8_8.6"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhel_tus:8.8::appstream","package":"gstreamer1-plugins-good","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.16.1-5.el8_8.6"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhel_tus:8.8::appstream","package":"gstreamer1-plugins-good-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.16.1-5.el8_8.6"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhel_tus:8.8::appstream","package":"gstreamer1-plugins-good-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.16.1-5.el8_8.6"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhel_tus:8.8::appstream","package":"gstreamer1-plugins-good-gtk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.16.1-5.el8_8.6"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhel_tus:8.8::appstream","package":"gstreamer1-plugins-good-gtk-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.16.1-5.el8_8.6"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.4::appstream","package":"gstreamer1-plugins-good","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.16.1-4.el8_4.5"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.4::appstream","package":"gstreamer1-plugins-good-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.16.1-4.el8_4.5"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.4::appstream","package":"gstreamer1-plugins-good-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.16.1-4.el8_4.5"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.4::appstream","package":"gstreamer1-plugins-good-gtk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.16.1-4.el8_4.5"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.4::appstream","package":"gstreamer1-plugins-good-gtk-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.16.1-4.el8_4.5"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhel_eus_long_life:8.4::appstream","package":"gstreamer1-plugins-good","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.16.1-4.el8_4.5"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhel_eus_long_life:8.4::appstream","package":"gstreamer1-plugins-good-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.16.1-4.el8_4.5"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhel_eus_long_life:8.4::appstream","package":"gstreamer1-plugins-good-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.16.1-4.el8_4.5"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhel_eus_long_life:8.4::appstream","package":"gstreamer1-plugins-good-gtk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.16.1-4.el8_4.5"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhel_eus_long_life:8.4::appstream","package":"gstreamer1-plugins-good-gtk-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.16.1-4.el8_4.5"}]}],"bundled":4},{"source":"osv","ecosystem":"Rocky Linux:10","package":"gstreamer1-plugins-good","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.26.7-2.el10_2.7"}]}],"bundled":2},{"source":"osv","ecosystem":"Rocky Linux:9","package":"gstreamer1-plugins-good","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.22.12-7.el9_8.8"}]}],"bundled":4},{"source":"osv","ecosystem":"Rocky Linux:8","package":"gstreamer1-plugins-good","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.16.1-7.el8_10.7"}]}],"bundled":4},{"source":"osv","ecosystem":"Ubuntu:Pro:16.04:LTS","package":"gst-plugins-good1.0","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.3-1ubuntu0.5+esm3"}]}],"versions":["1.6.0-1ubuntu1","1.6.1-1ubuntu1","1.6.2-1ubuntu1","1.7.1-1ubuntu1","1.7.2-1ubuntu1","1.7.90-1ubuntu1","1.7.91-1ubuntu1","1.8.0-1ubuntu1","1.8.1-1ubuntu0.1","1.8.2-1ubuntu0.1","1.8.2-1ubuntu0.2","1.8.2-1ubuntu0.3","1.8.3-1ubuntu0.3","1.8.3-1ubuntu0.4","1.8.3-1ubuntu0.5","1.8.3-1ubuntu0.5+esm1","1.8.3-1ubuntu0.5+esm2"]},{"source":"osv","ecosystem":"Ubuntu:Pro:18.04:LTS","package":"gst-plugins-good1.0","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.14.5-0ubuntu1~18.04.3+esm3"}]}],"versions":["1.12.3-1ubuntu1","1.12.4-1ubuntu1","1.13.1-1ubuntu1","1.13.91-1ubuntu1","1.14.0-1ubuntu1","1.14.1-1ubuntu1~ubuntu18.04.1","1.14.4-1ubuntu1~ubuntu18.04.1","1.14.5-0ubuntu1~18.04.1","1.14.5-0ubuntu1~18.04.2","1.14.5-0ubuntu1~18.04.3","1.14.5-0ubuntu1~18.04.3+esm1","1.14.5-0ubuntu1~18.04.3+esm2"]},{"source":"osv","ecosystem":"Ubuntu:Pro:20.04:LTS","package":"gst-plugins-good1.0","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.16.3-0ubuntu1.3+esm3"}]}],"versions":["1.16.1-1ubuntu1","1.16.2-1ubuntu1","1.16.2-1ubuntu2","1.16.2-1ubuntu2.1","1.16.3-0ubuntu1","1.16.3-0ubuntu1.1","1.16.3-0ubuntu1.2","1.16.3-0ubuntu1.3","1.16.3-0ubuntu1.3+esm1","1.16.3-0ubuntu1.3+esm2"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"gst-plugins-good1.0","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.20.3-0ubuntu1.9"}]}],"versions":["1.18.5-1ubuntu2","1.18.5-1ubuntu3","1.20.0-2ubuntu1","1.20.1-1ubuntu1","1.20.3-0ubuntu1","1.20.3-0ubuntu1.1","1.20.3-0ubuntu1.3","1.20.3-0ubuntu1.4","1.20.3-0ubuntu1.5","1.20.3-0ubuntu1.6","1.20.3-0ubuntu1.7","1.20.3-0ubuntu1.8"]},{"source":"osv","ecosystem":"Ubuntu:24.04:LTS","package":"gst-plugins-good1.0","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.24.2-1ubuntu1.7"}]}],"versions":["1.22.6-1ubuntu1","1.22.6-1ubuntu2","1.22.8-3ubuntu1","1.22.9-1ubuntu1","1.24.0-1ubuntu5","1.24.0-1ubuntu7","1.24.1-2ubuntu1","1.24.2-1ubuntu1","1.24.2-1ubuntu1.1","1.24.2-1ubuntu1.2","1.24.2-1ubuntu1.3","1.24.2-1ubuntu1.4","1.24.2-1ubuntu1.5","1.24.2-1ubuntu1.6"]},{"source":"osv","ecosystem":"Ubuntu:26.04:LTS","package":"gst-plugins-good1.0","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.28.2-2ubuntu0.3"}]}],"versions":["1.26.5-1ubuntu2","1.27.2-1ubuntu1","1.27.90-1ubuntu1","1.28.0-1ubuntu1","1.28.0-1ubuntu3","1.28.1-1ubuntu1","1.28.2-2","1.28.2-2ubuntu0.1","1.28.2-2ubuntu0.2"]},{"source":"osv","ecosystem":"Ubuntu:Pro:16.04:LTS","package":"gst-plugins-good1.0","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.3-1ubuntu0.5+esm3"}]}],"versions":["1.6.0-1ubuntu1","1.6.1-1ubuntu1","1.6.2-1ubuntu1","1.7.1-1ubuntu1","1.7.2-1ubuntu1","1.7.90-1ubuntu1","1.7.91-1ubuntu1","1.8.0-1ubuntu1","1.8.1-1ubuntu0.1","1.8.2-1ubuntu0.1","1.8.2-1ubuntu0.2","1.8.2-1ubuntu0.3","1.8.3-1ubuntu0.3","1.8.3-1ubuntu0.4","1.8.3-1ubuntu0.5","1.8.3-1ubuntu0.5+esm1","1.8.3-1ubuntu0.5+esm2"],"bundled":4},{"source":"osv","ecosystem":"Ubuntu:Pro:18.04:LTS","package":"gst-plugins-good1.0","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.14.5-0ubuntu1~18.04.3+esm3"}]}],"versions":["1.12.3-1ubuntu1","1.12.4-1ubuntu1","1.13.1-1ubuntu1","1.13.91-1ubuntu1","1.14.0-1ubuntu1","1.14.1-1ubuntu1~ubuntu18.04.1","1.14.4-1ubuntu1~ubuntu18.04.1","1.14.5-0ubuntu1~18.04.1","1.14.5-0ubuntu1~18.04.2","1.14.5-0ubuntu1~18.04.3","1.14.5-0ubuntu1~18.04.3+esm1","1.14.5-0ubuntu1~18.04.3+esm2"],"bundled":4},{"source":"osv","ecosystem":"Ubuntu:Pro:20.04:LTS","package":"gst-plugins-good1.0","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.16.3-0ubuntu1.3+esm3"}]}],"versions":["1.16.1-1ubuntu1","1.16.2-1ubuntu1","1.16.2-1ubuntu2","1.16.2-1ubuntu2.1","1.16.3-0ubuntu1","1.16.3-0ubuntu1.1","1.16.3-0ubuntu1.2","1.16.3-0ubuntu1.3","1.16.3-0ubuntu1.3+esm1","1.16.3-0ubuntu1.3+esm2"],"bundled":4},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"gst-plugins-good1.0","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.20.3-0ubuntu1.9"}]}],"versions":["1.18.5-1ubuntu2","1.18.5-1ubuntu3","1.20.0-2ubuntu1","1.20.1-1ubuntu1","1.20.3-0ubuntu1","1.20.3-0ubuntu1.1","1.20.3-0ubuntu1.3","1.20.3-0ubuntu1.4","1.20.3-0ubuntu1.5","1.20.3-0ubuntu1.6","1.20.3-0ubuntu1.7","1.20.3-0ubuntu1.8"],"bundled":4},{"source":"osv","ecosystem":"Ubuntu:24.04:LTS","package":"gst-plugins-good1.0","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.24.2-1ubuntu1.7"}]}],"versions":["1.22.6-1ubuntu1","1.22.6-1ubuntu2","1.22.8-3ubuntu1","1.22.9-1ubuntu1","1.24.0-1ubuntu5","1.24.0-1ubuntu7","1.24.1-2ubuntu1","1.24.2-1ubuntu1","1.24.2-1ubuntu1.1","1.24.2-1ubuntu1.2","1.24.2-1ubuntu1.3","1.24.2-1ubuntu1.4","1.24.2-1ubuntu1.5","1.24.2-1ubuntu1.6"],"bundled":4},{"source":"osv","ecosystem":"Ubuntu:26.04:LTS","package":"gst-plugins-good1.0","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.28.2-2ubuntu0.3"}]}],"versions":["1.26.5-1ubuntu2","1.27.2-1ubuntu1","1.27.90-1ubuntu1","1.28.0-1ubuntu1","1.28.0-1ubuntu3","1.28.1-1ubuntu1","1.28.2-2","1.28.2-2ubuntu0.1","1.28.2-2ubuntu0.2"],"bundled":4}],"products":[{"vendor":"gstreamer","product":"gstreamer"}],"references":[{"url":"https://www.zerodayinitiative.com/advisories/ZDI-26-464/","tags":["x_research-advisory","Third Party Advisory","advisory","article"]},{"url":"https://gstreamer.freedesktop.org/security/sa-2026-0050.html","tags":["vendor-advisory","Patch","Vendor Advisory","advisory","article"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-18296","tags":["advisory"]},{"url":"https://www.zerodayinitiative.com/advisories/ZDI-26-464"},{"url":"https://github.com/advisories/GHSA-3h9q-557w-x4r6"},{"url":"https://access.redhat.com/errata/RHSA-2026:59133","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-18296","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-18298","tags":["report"]},{"url":"https://bugzilla.redhat.com/2520580","tags":["report"]},{"url":"https://bugzilla.redhat.com/2520590","tags":["report"]},{"url":"https://errata.almalinux.org/10/ALSA-2026-59133.html","tags":["advisory"]},{"url":"https://www.redhat.com/security/data/cve/CVE-2026-18295.html","tags":["report"]},{"url":"https://access.redhat.com/errata/RHSA-2026:59152","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-18295","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-18299","tags":["report"]},{"url":"https://bugzilla.redhat.com/2520605","tags":["report"]},{"url":"https://bugzilla.redhat.com/2520606","tags":["report"]},{"url":"https://errata.almalinux.org/9/ALSA-2026-59152.html","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2026:59179","tags":["advisory"]},{"url":"https://errata.almalinux.org/8/ALSA-2026-59179.html","tags":["advisory"]},{"url":"https://errata.tuxcare.com/els_os/tuxcare9.6esu/CLSA-2026-1788197463.html","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-18295","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-18298","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-18299","tags":["advisory"]},{"url":"https://errata.tuxcare.com/els_os/almalinux9.2esu/CLSA-2026-1788272453.html","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-73433","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-73434","tags":["advisory"]},{"url":"https://errata.tuxcare.com/els_os/rhel7els/CLSA-2026-1792532772.html","tags":["advisory"]},{"url":"https://errata.tuxcare.com/els_os/oraclelinux7els/CLSA-2026-1792532987.html","tags":["advisory"]},{"url":"https://errata.tuxcare.com/els_os/centos7els/CLSA-2026-1792533291.html","tags":["advisory"]},{"url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/18xxx/CVE-2026-18296.json","tags":["advisory"]},{"url":"https://security-tracker.debian.org/tracker/CVE-2026-18296","tags":["advisory"]},{"url":"https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2026-4053","tags":["advisory"]},{"url":"https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2026-4054","tags":["advisory"]},{"url":"https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2026-4055","tags":["advisory"]},{"url":"https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2026-4056","tags":["advisory"]},{"url":"https://access.redhat.com/security/updates/classification/#important","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2520580","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2520590","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_59133.json","tags":["advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2520606","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-18295","tags":["advisory"]},{"url":"https://www.zerodayinitiative.com/advisories/ZDI-26-463/","tags":["article"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-18296","tags":["advisory","report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-18298","tags":["advisory"]},{"url":"https://gstreamer.freedesktop.org/security/sa-2026-0052.html","tags":["article"]},{"url":"https://www.zerodayinitiative.com/advisories/ZDI-26-466/","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2520605","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_59152.json","tags":["advisory"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-18299","tags":["advisory"]},{"url":"https://gstreamer.freedesktop.org/security/sa-2026-0051.html","tags":["article"]},{"url":"https://www.zerodayinitiative.com/advisories/ZDI-26-467/","tags":["article"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_59179.json","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2026:71646","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_71646.json","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2026:71647","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_71647.json","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2026:71648","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_71648.json","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2026:71650","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_71650.json","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2026:72367","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_72367.json","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2026:72482","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_72482.json","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2026:73040","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_73040.json","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2026:73424","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_73424.json","tags":["advisory"]},{"url":"https://errata.rockylinux.org/RLSA-2026:59133","tags":["advisory"]},{"url":"https://errata.rockylinux.org/RLSA-2026:59152","tags":["advisory"]},{"url":"https://errata.rockylinux.org/RLSA-2026:59179","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2026-18296","tags":["report"]},{"url":"https://ubuntu.com/security/notices/USN-8798-1","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2026-18295","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-18298","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-18299","tags":["report"]}],"sources":{"cve":[{"id":"CVE-2026-18296","title":"GStreamer MRF File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability","description":"GStreamer MRF File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of GStreamer. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file.\n\nThe specific flaw exists within the parsing of MRF files. The issue results from the lack of proper validation of the length of user-supplied data prior to copying it to a heap-based buffer. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-29608.","status":"published","published":"2026-08-20T16:22:07.856Z","modified":"2026-08-27T16:24:54.535Z","cvss":[{"version":"3.0","score":7.8,"vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high","assessor":"cna"}],"cwes":["CWE-122"],"updated_at":"2026-11-02T14:20:12.60856Z"}],"euvd":[{"id":"EUVD-2026-63445","description":"GStreamer MRF File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of GStreamer. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file.\n\nThe specific flaw exists within the parsing of MRF files. The issue results from the lack of proper validation of the length of user-supplied data prior to copying it to a heap-based buffer. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-29608.","status":"published","published":"2026-08-20T16:22:07Z","modified":"2026-08-27T16:24:54Z","cvss":[{"version":"3.0","score":7.8,"vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T18:01:27.27583Z"}],"ghsa":[{"id":"GHSA-3h9q-557w-x4r6","title":"GStreamer MRF File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability. This...","description":"GStreamer MRF File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of GStreamer. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file.\n\nThe specific flaw exists within the parsing of MRF files. The issue results from the lack of proper validation of the length of user-supplied data prior to copying it to a heap-based buffer. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-29608.","status":"published","published":"2026-08-20T18:30:57Z","modified":"2026-08-20T18:31:06Z","cvss":[{"version":"3.0","score":7.8,"vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"cwes":["CWE-122"],"updated_at":"2026-11-02T15:10:47.133481Z"}],"nvd":[{"id":"CVE-2026-18296","description":"GStreamer MRF File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of GStreamer. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file.\n\nThe specific flaw exists within the parsing of MRF files. The issue results from the lack of proper validation of the length of user-supplied data prior to copying it to a heap-based buffer. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-29608.","status":"published","published":"2026-08-20T17:17:26.39Z","modified":"2026-10-26T10:10:00.14Z","cvss":[{"version":"3.0","score":7.8,"vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high","assessor":"secondary"}],"cwes":["CWE-122"],"updated_at":"2026-11-02T14:12:40.302911Z"}],"osv":[{"id":"CVE-2026-18296","title":"GStreamer MRF File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability","description":"GStreamer MRF File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of GStreamer. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file.\n\nThe specific flaw exists within the parsing of MRF files. The issue results from the lack of proper validation of the length of user-supplied data prior to copying it to a heap-based buffer. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-29608.","status":"published","published":"2026-08-20T16:22:07.856Z","modified":"2026-10-28T02:30:42.458789376Z","cvss":[{"version":"3.0","score":7.8,"vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"cwes":["CWE-122"],"updated_at":"2026-11-02T15:44:58.024074Z"},{"id":"DEBIAN-CVE-2026-18296","description":"GStreamer MRF File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of GStreamer. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file.  The specific flaw exists within the parsing of MRF files. The issue results from the lack of proper validation of the length of user-supplied data prior to copying it to a heap-based buffer. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-29608.","status":"published","published":"2026-08-20T17:17:26.39Z","modified":"2026-10-27T10:00:26.206646206Z","cvss":[{"version":"3.0","score":7.8,"vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:45:53.097669Z"},{"id":"OESA-2026-4053","title":"gstreamer1-plugins-good security update","description":"GStreamer is a streaming media framework, based on graphs of filters which operate on media data. Applications using this library can do anything from real-time sound processing to playing videos, and just about anything else media-related.  Its plugin-based architecture means that new data types or processing capabilities can be added simply by installing new plugins.\r\n\r\nSecurity Fix(es):\n\nGStreamer MRF File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of GStreamer. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file.\n\nThe specific flaw exists within the parsing of MRF files. The issue results from the lack of proper validation of user-supplied data, which can result in a write past the end of an allocated buffer. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-29510.(CVE-2026-18295)\n\nGStreamer MRF File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of GStreamer. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file.\n\nThe specific flaw exists within the parsing of MRF files. The issue results from the lack of proper validation of the length of user-supplied data prior to copying it to a heap-based buffer. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-29608.(CVE-2026-18296)\n\nGStreamer PNG File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of GStreamer. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file.\n\nThe specific flaw exists within the parsing of PNG files. The issue results from the lack of proper validation of the length of user-supplied data prior to copying it to a heap-based buffer. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-29581.(CVE-2026-18298)\n\nGStreamer rtpsbcdepay Use-After-Free Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of GStreamer. Interaction with this library is required to exploit this vulnerability but attack vectors may vary depending on the implementation.\n\nThe specific flaw exists within the processing of RTP payload elements. The issue results from the lack of validating the existence of an object prior to performing operations on the object. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-29787.(CVE-2026-18299)","status":"published","published":"2026-09-25T01:27:42Z","modified":"2026-09-25T01:45:07.410575938Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:52:47.643553Z"},{"id":"OESA-2026-4054","title":"gstreamer1-plugins-good security update","description":"GStreamer is a streaming media framework, based on graphs of filters which operate on media data. Applications using this library can do anything from real-time sound processing to playing videos, and just about anything else media-related.  Its plugin-based architecture means that new data types or processing capabilities can be added simply by installing new plugins.\r\n\r\nSecurity Fix(es):\n\nGStreamer MRF File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of GStreamer. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file.\n\nThe specific flaw exists within the parsing of MRF files. The issue results from the lack of proper validation of user-supplied data, which can result in a write past the end of an allocated buffer. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-29510.(CVE-2026-18295)\n\nGStreamer MRF File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of GStreamer. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file.\n\nThe specific flaw exists within the parsing of MRF files. The issue results from the lack of proper validation of the length of user-supplied data prior to copying it to a heap-based buffer. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-29608.(CVE-2026-18296)\n\nGStreamer PNG File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of GStreamer. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file.\n\nThe specific flaw exists within the parsing of PNG files. The issue results from the lack of proper validation of the length of user-supplied data prior to copying it to a heap-based buffer. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-29581.(CVE-2026-18298)\n\nGStreamer rtpsbcdepay Use-After-Free Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of GStreamer. Interaction with this library is required to exploit this vulnerability but attack vectors may vary depending on the implementation.\n\nThe specific flaw exists within the processing of RTP payload elements. The issue results from the lack of validating the existence of an object prior to performing operations on the object. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-29787.(CVE-2026-18299)","status":"published","published":"2026-09-25T01:27:42Z","modified":"2026-09-25T01:45:03.640295875Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:52:47.643553Z"},{"id":"OESA-2026-4055","title":"gstreamer1-plugins-good security update","description":"GStreamer is a streaming media framework, based on graphs of filters which operate on media data. Applications using this library can do anything from real-time sound processing to playing videos, and just about anything else media-related.  Its plugin-based architecture means that new data types or processing capabilities can be added simply by installing new plugins.\r\n\r\nSecurity Fix(es):\n\nGStreamer MRF File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of GStreamer. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file.\n\nThe specific flaw exists within the parsing of MRF files. The issue results from the lack of proper validation of user-supplied data, which can result in a write past the end of an allocated buffer. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-29510.(CVE-2026-18295)\n\nGStreamer MRF File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of GStreamer. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file.\n\nThe specific flaw exists within the parsing of MRF files. The issue results from the lack of proper validation of the length of user-supplied data prior to copying it to a heap-based buffer. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-29608.(CVE-2026-18296)\n\nGStreamer PNG File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of GStreamer. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file.\n\nThe specific flaw exists within the parsing of PNG files. The issue results from the lack of proper validation of the length of user-supplied data prior to copying it to a heap-based buffer. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-29581.(CVE-2026-18298)\n\nGStreamer rtpsbcdepay Use-After-Free Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of GStreamer. Interaction with this library is required to exploit this vulnerability but attack vectors may vary depending on the implementation.\n\nThe specific flaw exists within the processing of RTP payload elements. The issue results from the lack of validating the existence of an object prior to performing operations on the object. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-29787.(CVE-2026-18299)","status":"published","published":"2026-09-25T01:27:43Z","modified":"2026-09-25T01:45:07.905337794Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:52:47.643553Z"},{"id":"OESA-2026-4056","title":"gstreamer1-plugins-good security update","description":"GStreamer is a streaming media framework, based on graphs of filters which operate on media data. Applications using this library can do anything from real-time sound processing to playing videos, and just about anything else media-related.  Its plugin-based architecture means that new data types or processing capabilities can be added simply by installing new plugins.\r\n\r\nSecurity Fix(es):\n\nGStreamer MRF File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of GStreamer. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file.\n\nThe specific flaw exists within the parsing of MRF files. The issue results from the lack of proper validation of user-supplied data, which can result in a write past the end of an allocated buffer. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-29510.(CVE-2026-18295)\n\nGStreamer MRF File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of GStreamer. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file.\n\nThe specific flaw exists within the parsing of MRF files. The issue results from the lack of proper validation of the length of user-supplied data prior to copying it to a heap-based buffer. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-29608.(CVE-2026-18296)\n\nGStreamer PNG File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of GStreamer. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file.\n\nThe specific flaw exists within the parsing of PNG files. The issue results from the lack of proper validation of the length of user-supplied data prior to copying it to a heap-based buffer. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-29581.(CVE-2026-18298)\n\nGStreamer rtpsbcdepay Use-After-Free Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of GStreamer. Interaction with this library is required to exploit this vulnerability but attack vectors may vary depending on the implementation.\n\nThe specific flaw exists within the processing of RTP payload elements. The issue results from the lack of validating the existence of an object prior to performing operations on the object. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-29787.(CVE-2026-18299)","status":"published","published":"2026-09-25T01:27:44Z","modified":"2026-09-25T01:45:07.896915365Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:52:47.643553Z"},{"id":"RHSA-2026:59133","title":"Red Hat Security Advisory: gstreamer1-plugins-good security update","status":"published","published":"2026-08-25T10:23:10Z","modified":"2026-09-30T10:13:18Z","cvss":[{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:21.91255Z"},{"id":"RHSA-2026:59152","title":"Red Hat Security Advisory: gstreamer1-plugins-good security update","status":"published","published":"2026-08-25T10:23:17Z","modified":"2026-09-30T10:13:25Z","cvss":[{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:21.91255Z"},{"id":"RHSA-2026:59179","title":"Red Hat Security Advisory: gstreamer1-plugins-good security update","status":"published","published":"2026-08-25T10:23:17Z","modified":"2026-09-30T10:13:25Z","cvss":[{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:21.91255Z"},{"id":"RHSA-2026:71646","title":"Red Hat Security Advisory: gstreamer1-plugins-good security update","status":"published","published":"2026-09-25T10:15:42Z","modified":"2026-09-30T10:17:15Z","cvss":[{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:22.928316Z"},{"id":"RHSA-2026:71647","title":"Red Hat Security Advisory: gstreamer1-plugins-good security update","status":"published","published":"2026-09-25T10:15:42Z","modified":"2026-09-30T10:17:15Z","cvss":[{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:22.928316Z"},{"id":"RHSA-2026:71648","title":"Red Hat Security Advisory: gstreamer1-plugins-good security update","status":"published","published":"2026-09-25T10:15:43Z","modified":"2026-09-30T10:17:16Z","cvss":[{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:22.928316Z"},{"id":"RHSA-2026:71650","title":"Red Hat Security Advisory: gstreamer1-plugins-good security update","status":"published","published":"2026-09-25T10:15:44Z","modified":"2026-09-30T10:17:16Z","cvss":[{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:22.928316Z"},{"id":"RHSA-2026:72367","title":"Red Hat Security Advisory: gstreamer1-plugins-good security update","status":"published","published":"2026-09-28T10:15:58Z","modified":"2026-09-30T10:17:30Z","cvss":[{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:22.928316Z"},{"id":"RHSA-2026:72482","title":"Red Hat Security Advisory: gstreamer1-plugins-good security update","status":"published","published":"2026-09-29T10:18:26Z","modified":"2026-09-30T10:17:33Z","cvss":[{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:22.928316Z"},{"id":"RHSA-2026:73040","title":"Red Hat Security Advisory: gstreamer1-plugins-good security update","status":"published","published":"2026-09-30T10:17:49Z","modified":"2026-09-30T10:31:25.779236063Z","cvss":[{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:22.928316Z"},{"id":"RHSA-2026:73424","title":"Red Hat Security Advisory: gstreamer1-plugins-good security update","status":"published","published":"2026-09-30T10:17:57Z","modified":"2026-09-30T10:32:25.198033147Z","cvss":[{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:22.928316Z"},{"id":"RLSA-2026:59133","title":"Important: gstreamer1-plugins-good security update","description":"GStreamer is a streaming media framework based on graphs of filters which operate on media data. The gstreamer1-plugins-good packages contain a collection of well-supported plug-ins of good quality and under the LGPL license.\n\nSecurity Fix(es):\n\n* gstreamer: GStreamer: Remote Code Execution via MRF file parsing heap-based buffer overflow (CVE-2026-18296)\n\n* gstreamer: GStreamer: Remote code execution via heap-based buffer overflow in PNG file parsing (CVE-2026-18298)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.","status":"published","published":"2026-08-25T12:07:46.973584Z","modified":"2026-08-26T01:10:34.865445162Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:26.111232Z"},{"id":"RLSA-2026:59152","title":"Important: gstreamer1-plugins-good security update","description":"GStreamer is a streaming media framework based on graphs of filters which operate on media data. The gstreamer1-plugins-good packages contain a collection of well-supported plug-ins of good quality and under the LGPL license.\n\nSecurity Fix(es):\n\n* gstreamer: GStreamer: Remote Code Execution via MRF file parsing heap-based buffer overflow (CVE-2026-18296)\n\n* gstreamer: GStreamer: Remote code execution via heap-based buffer overflow in PNG file parsing (CVE-2026-18298)\n\n* gstreamer: GStreamer: Remote Code Execution via Use-After-Free in rtpsbcdepay (CVE-2026-18299)\n\n* GStreamer: GStreamer: Remote code execution via MRF file parsing (CVE-2026-18295)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.","status":"published","published":"2026-08-25T12:04:25.60621Z","modified":"2026-08-26T01:11:15.257939599Z","cvss":[{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:26.111232Z"},{"id":"RLSA-2026:59179","title":"Important: gstreamer1-plugins-good security update","description":"GStreamer is a streaming media framework based on graphs of filters which operate on media data. The gstreamer1-plugins-good packages contain a collection of well-supported plug-ins of good quality and under the LGPL license.\n\nSecurity Fix(es):\n\n* gstreamer: GStreamer: Remote Code Execution via MRF file parsing heap-based buffer overflow (CVE-2026-18296)\n\n* gstreamer: GStreamer: Remote code execution via heap-based buffer overflow in PNG file parsing (CVE-2026-18298)\n\n* gstreamer: GStreamer: Remote Code Execution via Use-After-Free in rtpsbcdepay (CVE-2026-18299)\n\n* GStreamer: GStreamer: Remote code execution via MRF file parsing (CVE-2026-18295)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.","status":"published","published":"2026-08-25T06:01:14.22059Z","modified":"2026-08-26T01:10:09.26089642Z","cvss":[{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:26.111232Z"},{"id":"UBUNTU-CVE-2026-18296","description":"GStreamer MRF File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of GStreamer. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of MRF files. The issue results from the lack of proper validation of the length of user-supplied data prior to copying it to a heap-based buffer. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-29608.","status":"published","published":"2026-08-20T17:17:00Z","modified":"2026-09-22T03:22:14.5240011Z","cvss":[{"version":"3.0","score":7.8,"vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T16:56:01.334185Z"},{"id":"ALSA-2026:59133","title":"Important: gstreamer1-plugins-good security update","description":"GStreamer is a streaming media framework based on graphs of filters which operate on media data. The gstreamer1-plugins-good packages contain a collection of well-supported plug-ins of good quality and under the LGPL license.  \n\nSecurity Fix(es):  \n\n  * gstreamer: GStreamer: Remote Code Execution via MRF file parsing heap-based buffer overflow (CVE-2026-18296)\n  * gstreamer: GStreamer: Remote code execution via heap-based buffer overflow in PNG file parsing (CVE-2026-18298)\n\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.\n","status":"published","published":"2026-08-24T00:00:00Z","modified":"2026-10-29T11:42:24.53626106Z","updated_at":"2026-11-02T15:27:54.753319Z"},{"id":"ALSA-2026:59152","title":"Important: gstreamer1-plugins-good security update","description":"GStreamer is a streaming media framework based on graphs of filters which operate on media data. The gstreamer1-plugins-good packages contain a collection of well-supported plug-ins of good quality and under the LGPL license.  \n\nSecurity Fix(es):  \n\n  * gstreamer: GStreamer: Remote Code Execution via MRF file parsing heap-based buffer overflow (CVE-2026-18296)\n  * gstreamer: GStreamer: Remote code execution via heap-based buffer overflow in PNG file parsing (CVE-2026-18298)\n  * gstreamer: GStreamer: Remote Code Execution via Use-After-Free in rtpsbcdepay (CVE-2026-18299)\n  * GStreamer: GStreamer: Remote code execution via MRF file parsing (CVE-2026-18295)\n\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.\n","status":"published","published":"2026-08-24T00:00:00Z","modified":"2026-10-29T11:32:36.46337767Z","updated_at":"2026-11-02T15:27:54.753319Z"},{"id":"ALSA-2026:59179","title":"Important: gstreamer1-plugins-good security update","description":"GStreamer is a streaming media framework based on graphs of filters which operate on media data. The gstreamer1-plugins-good packages contain a collection of well-supported plug-ins of good quality and under the LGPL license.  \n\nSecurity Fix(es):  \n\n  * gstreamer: GStreamer: Remote Code Execution via MRF file parsing heap-based buffer overflow (CVE-2026-18296)\n  * gstreamer: GStreamer: Remote code execution via heap-based buffer overflow in PNG file parsing (CVE-2026-18298)\n  * gstreamer: GStreamer: Remote Code Execution via Use-After-Free in rtpsbcdepay (CVE-2026-18299)\n  * GStreamer: GStreamer: Remote code execution via MRF file parsing (CVE-2026-18295)\n\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.\n","status":"published","published":"2026-08-24T00:00:00Z","modified":"2026-10-29T11:02:24.909785294Z","updated_at":"2026-11-02T15:27:54.753319Z"},{"id":"CLSA-2026-1788197463","title":"gstreamer1-plugins-good: Fix of 4 CVEs","description":"- CVE-2026-18295: qtmoovrecover: validate box sizes when parsing MRF recovery\n  files to prevent an out-of-bounds write\n- CVE-2026-18296: qtmoovrecover: validate minimum atom sizes when parsing MRF\n  recovery files to prevent a heap buffer overflow\n- CVE-2026-18298: gdkpixbufdec: handle format and resolution changes correctly\n  to prevent a heap buffer overflow\n- CVE-2026-18299: rtpsbcdepay: check for available data in the adapter and for\n  a large enough payload header to prevent an out-of-bounds read and\n  use-after-free","status":"published","published":"2026-08-31T17:31:16Z","modified":"2026-10-26T09:31:30.256379354Z","updated_at":"2026-11-02T15:43:47.591214Z"},{"id":"CLSA-2026-1788272453","title":"gstreamer1-plugins-good: Fix of 6 CVEs","description":"- CVE-2026-18295: fix out-of-bounds write in MRF atoms recovery parsing that\n  could lead to remote code execution\n- CVE-2026-18296: fix heap-based buffer overflow in MRF atoms recovery\n  parsing that could lead to remote code execution\n- CVE-2026-18298: drop gdkpixbufdec rank to NONE and fix output buffer pool\n  not being reconfigured on format/resolution changes between frames\n- CVE-2026-18299: fix use-after-free in rtpsbcdepay RTP payload processing\n- CVE-2026-73433: fix integer underflow in avidemux FUJIFILM strd metadata\n  parsing that could cause an out-of-bounds read/write\n- CVE-2026-73434: fix out-of-bounds read in avidemux vprp video field\n  descriptor parsing caused by an incorrect divisor","status":"published","published":"2026-09-01T14:21:08Z","modified":"2026-10-26T09:30:33.192637039Z","updated_at":"2026-11-02T15:43:47.591214Z"},{"id":"CLSA-2026-1792532772","title":"gstreamer1-plugins-good: Fix of 4 CVEs","description":"- rebase onto Oracle 1.10.4-2.0.7.el7_9\n- the vendor fixes in this build: CVE-2026-18295 and CVE-2026-18296\n  (qtmoovrecover: validate box sizes), CVE-2026-18298 (gdkpixbufdec: handle\n  format and resolution changes correctly) and CVE-2026-18299 (rtpsbcdepay:\n  check that enough data is available in the adapter)\n- keep the TuxCare wavpackdec follow-up to the vendor's Patch1007: it widens the\n  output-buffer size computation in gst_wavpack_dec_handle_frame() to gsize,\n  which the vendor's backport leaves in 32-bit arithmetic on this branch\n- keep the matroska-demux.c correction that restores the 18-byte WAVEFORMATEX\n  offset dropped by the vendor's Patch1003 in its pre-2.67.4 glib port\n- keep the gtk-doc build fix and BuildRequires: gtk-doc unbounded rather than\n  Oracle's \u003c= 1.25.1, which no i686 buildroot can satisfy\n- renumber the two TuxCare follow-up patches to Patch1011 and Patch1012; Oracle\n  took 1008 and 1009 for its own patches in this build\n- keep the CVE-2026-73433 and CVE-2026-73434 avidemux fixes from\n  1.10.4-2.0.5.tuxcare.els2, renumbered to Patch1013 and Patch1014 since\n  Oracle took 1010 in this build","status":"published","published":"2026-10-21T08:18:47Z","modified":"2026-10-26T09:31:59.326608504Z","updated_at":"2026-11-02T15:43:54.672859Z"},{"id":"CLSA-2026-1792532987","title":"gstreamer1-plugins-good: Fix of 4 CVEs","description":"- rebase onto Oracle 1.10.4-2.0.7.el7_9\n- the vendor fixes in this build: CVE-2026-18295 and CVE-2026-18296\n  (qtmoovrecover: validate box sizes), CVE-2026-18298 (gdkpixbufdec: handle\n  format and resolution changes correctly) and CVE-2026-18299 (rtpsbcdepay:\n  check that enough data is available in the adapter)\n- keep the TuxCare wavpackdec follow-up to the vendor's Patch1007: it widens the\n  output-buffer size computation in gst_wavpack_dec_handle_frame() to gsize,\n  which the vendor's backport leaves in 32-bit arithmetic on this branch\n- keep the matroska-demux.c correction that restores the 18-byte WAVEFORMATEX\n  offset dropped by the vendor's Patch1003 in its pre-2.67.4 glib port\n- keep the gtk-doc build fix and BuildRequires: gtk-doc unbounded rather than\n  Oracle's \u003c= 1.25.1, which no i686 buildroot can satisfy\n- renumber the two TuxCare follow-up patches to Patch1011 and Patch1012; Oracle\n  took 1008 and 1009 for its own patches in this build\n- keep the CVE-2026-73433 and CVE-2026-73434 avidemux fixes from\n  1.10.4-2.0.5.tuxcare.els2, renumbered to Patch1013 and Patch1014 since\n  Oracle took 1010 in this build","status":"published","published":"2026-10-21T08:15:45Z","modified":"2026-10-26T09:31:57.127460554Z","updated_at":"2026-11-02T15:43:54.672859Z"},{"id":"CLSA-2026-1792533291","title":"gstreamer1-plugins-good: Fix of 4 CVEs","description":"- rebase onto Oracle 1.10.4-2.0.7.el7_9\n- the vendor fixes in this build: CVE-2026-18295 and CVE-2026-18296\n  (qtmoovrecover: validate box sizes), CVE-2026-18298 (gdkpixbufdec: handle\n  format and resolution changes correctly) and CVE-2026-18299 (rtpsbcdepay:\n  check that enough data is available in the adapter)\n- keep the TuxCare wavpackdec follow-up to the vendor's Patch1007: it widens the\n  output-buffer size computation in gst_wavpack_dec_handle_frame() to gsize,\n  which the vendor's backport leaves in 32-bit arithmetic on this branch\n- keep the matroska-demux.c correction that restores the 18-byte WAVEFORMATEX\n  offset dropped by the vendor's Patch1003 in its pre-2.67.4 glib port\n- keep the gtk-doc build fix and BuildRequires: gtk-doc unbounded rather than\n  Oracle's \u003c= 1.25.1, which no i686 buildroot can satisfy\n- renumber the two TuxCare follow-up patches to Patch1011 and Patch1012; Oracle\n  took 1008 and 1009 for its own patches in this build\n- keep the CVE-2026-73433 and CVE-2026-73434 avidemux fixes from\n  1.10.4-2.0.5.tuxcare.els2, renumbered to Patch1013 and Patch1014 since\n  Oracle took 1010 in this build","status":"published","published":"2026-10-21T20:45:36Z","modified":"2026-10-26T09:31:43.809553358Z","updated_at":"2026-11-02T15:43:54.672859Z"},{"id":"USN-8798-1","title":"gst-plugins-good1.0 vulnerabilities","description":"It was discovered that GStreamer Good Plugins incorrectly parsed certain\nMRF files. A remote attacker could possibly use this issue to execute\narbitrary code. (CVE-2026-18295, CVE-2026-18296)\n\nIt was discovered that GStreamer Good Plugins incorrectly parsed certain\nPNG files. A remote attacker could possibly use this issue to execute\narbitrary code. (CVE-2026-18298)\n\nDongHyeon Hwang discovered that GStreamer Good Plugins incorrectly\nhandled certain RTP packets. A remote attacker could possibly use this\nissue to execute arbitrary code. (CVE-2026-18299)","status":"published","published":"2026-09-21T18:32:49Z","modified":"2026-09-22T03:27:37.367663176Z","updated_at":"2026-11-02T16:58:26.907654Z"}]}}