https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-02T20:55:01.217306+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/alsa-2023:2260 ALSA-2023:2260 — Moderate: gstreamer1-plugins-good security update 2026-10-02T20:55:01.348057+00:00

Affected: AlmaLinux:9: gstreamer1-plugins-good, AlmaLinux:9: gstreamer1-plugins-good-gtk

GStreamer is a streaming media framework based on graphs of filters which operate on media data. The gstreamer1-plugins-good packages contain a collection of well-supported plug-ins of good quality and under the LGPL license.

Security Fix(es):

* gstreamer-plugins-good: Potential heap overwrite in gst_matroska_demux_add_wvpk_header() (CVE-2022-1920) * gstreamer-plugins-good: Heap-based buffer overflow in the avi demuxer when handling certain AVI files (CVE-2022-1921) * gstreamer-plugins-good: Potential heap overwrite in mkv demuxing using zlib decompression (CVE-2022-1922) * gstreamer-plugins-good: Potential heap overwrite in mkv demuxing using bz2 decompression (CVE-2022-1923) * gstreamer-plugins-good: Potential heap overwrite in mkv demuxing using lzo decompression (CVE-2022-1924) * gstreamer-plugins-good: Potential heap overwrite in mkv demuxing using HEADERSTRIP decompression (CVE-2022-1925) * gstreamer-plugins-good: Potential heap overwrite in mp4 demuxing using zlib decompression (CVE-2022-2122)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.

 https://cve.radiocsirt.org/vuln/bdu:2023-04783 bdu:2023-04783 2026-10-02T20:55:01.348128+00:00 bdu:2023-04783 https://cve.radiocsirt.org/vuln/euvd-2026-12010 EUVD-2026-12010 2026-10-02T20:55:01.348146+00:00 EUVD-2026-12010 https://cve.radiocsirt.org/vuln/fkie_cve-2022-1923 fkie_cve-2022-1923 2026-10-02T20:55:01.348158+00:00

DOS / potential heap overwrite in mkv demuxing using bzip decompression. Integer overflow in matroskademux element in bzip decompression function which causes a segfault, or could cause a heap overwrite, depending on libc and OS. Depending on the libc used, and the underlying OS capabilities, it could be just a segfault or a heap overwrite. If the libc uses mmap for large chunks, and the OS supports mmap, then it is just a segfault (because the realloc before the integer overflow will use mremap to reduce the size of the chunk, and it will start to write to unmapped memory). However, if using a libc implementation that does not use mmap, or if the OS does not support mmap while using libc, then this could result in a heap overwrite.

 https://cve.radiocsirt.org/vuln/ghsa-j6v3-2c6w-pwpm GHSA-j6v3-2c6w-pwpm 2026-10-02T20:55:01.348183+00:00

DOS / potential heap overwrite in mkv demuxing using bzip decompression. Integer overflow in matroskademux element in bzip decompression function which causes a segfault, or could cause a heap overwrite, depending on libc and OS. Depending on the libc used, and the underlying OS capabilities, it could be just a segfault or a heap overwrite. If the libc uses mmap for large chunks, and the OS supports mmap, then it is just a segfault (because the realloc before the integer overflow will use mremap to reduce the size of the chunk, and it will start to write to unmapped memory). However, if using a libc implementation that does not use mmap, or if the OS does not support mmap while using libc, then this could result in a heap overwrite.

 https://cve.radiocsirt.org/vuln/gsd-2022-1923 gsd-2022-1923 2026-10-02T20:55:01.348201+00:00 gsd-2022-1923 https://cve.radiocsirt.org/vuln/oesa-2022-1736 OESA-2022-1736 — gstreamer1-plugins-good security update 2026-10-02T20:55:01.348212+00:00

Affected: openEuler:20.03-LTS-SP1: gstreamer1-plugins-good, openEuler:20.03-LTS-SP3: gstreamer1-plugins-good, openEuler:22.03-LTS: gstreamer1-plugins-good

GStreamer is a streaming media framework, based on graphs of filters which operate on media data. Applications using this library can do anything from real-time sound processing to playing videos, and just about anything else media-related. Its plugin-based architecture means that new data types or processing capabilities can be added simply by installing new plugins. Security Fix(es): Potential heap overwrite in the mkv demuxer when handling certain Matroska files in GStreamer versions before 1.20.3.(CVE-2022-1920) Potential heap overwrite in the qt demuxer when handling certain QuickTime/MP4 files in GStreamer versions before 1.20.3.(CVE-2022-2122) Heap-based buffer overflow in the avi demuxer when handling certain AVI files in GStreamer versions before 1.20.3.(CVE-2022-1921) Potential heap overwrite in the mkv demuxer when handling certain Matroska/WebM files in GStreamer versions before 1.20.3.(CVE-2022-1922) Potential heap overwrite in the mkv demuxer when handling certain Matroska/WebM files in GStreamer versions before 1.20.3.(CVE-2022-1923) Potential heap overwrite in the mkv demuxer when handling certain Matroska/WebM files in GStreamer versions before 1.20.3.(CVE-2022-1924) Potential heap overwrite in the mkv demuxer when handling certain Matroska/WebM files in GStreamer versions before 1.20.3.(CVE-2022-1925)

 https://cve.radiocsirt.org/vuln/rhsa-2023:2260 RHSA-2023:2260 — Red Hat Security Advisory: gstreamer1-plugins-good security update 2026-10-02T20:55:01.348244+00:00

gstreamer-plugins-good: Potential heap overwrite in gst_matroska_demux_add_wvpk_header() gstreamer-plugins-good: Heap-based buffer overflow in the avi demuxer when handling certain AVI files gstreamer-plugins-good: Potential heap overwrite in mkv demuxing using zlib decompression gstreamer-plugins-good: Potential heap overwrite in mkv demuxing using bz2 decompression gstreamer-plugins-good: Potential heap overwrite in mkv demuxing using lzo decompression gstreamer-plugins-good: Potential heap overwrite in mkv demuxing using HEADERSTRIP decompression gstreamer-plugins-good: Potential heap overwrite in mp4 demuxing using zlib decompression

 https://cve.radiocsirt.org/vuln/suse-su-2022:2911-1 SUSE-SU-2022:2911-1 — Security update for gstreamer-plugins-good 2026-10-02T20:55:01.348272+00:00

Security update for gstreamer-plugins-good

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2022-1923 UBUNTU-CVE-2022-1923 2026-10-02T20:55:01.348292+00:00

Affected: Ubuntu:Pro:16.04:LTS: gst-plugins-good1.0, Ubuntu:18.04:LTS: gst-plugins-good1.0, Ubuntu:20.04:LTS: gst-plugins-good1.0, Ubuntu:22.04:LTS: gst-plugins-good1.0

DOS / potential heap overwrite in mkv demuxing using bzip decompression. Integer overflow in matroskademux element in bzip decompression function which causes a segfault, or could cause a heap overwrite, depending on libc and OS. Depending on the libc used, and the underlying OS capabilities, it could be just a segfault or a heap overwrite. If the libc uses mmap for large chunks, and the OS supports mmap, then it is just a segfault (because the realloc before the integer overflow will use mremap to reduce the size of the chunk, and it will start to write to unmapped memory). However, if using a libc implementation that does not use mmap, or if the OS does not support mmap while using libc, then this could result in a heap overwrite.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2022-0374 WID-SEC-W-2022-0374 — GStreamer: Mehrere Schwachstellen 2026-10-02T20:55:01.348318+00:00

Ein Angreifer kann mehrere Schwachstellen in GStreamer ausnutzen, um Dateien zu manipulieren und einen Denial of Service Zustand herzustellen.