https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-02T17:00:23.660353+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/alsa-2023:2260 ALSA-2023:2260 — Moderate: gstreamer1-plugins-good security update 2026-10-02T17:00:23.675458+00:00

Affected: AlmaLinux:9: gstreamer1-plugins-good, AlmaLinux:9: gstreamer1-plugins-good-gtk

GStreamer is a streaming media framework based on graphs of filters which operate on media data. The gstreamer1-plugins-good packages contain a collection of well-supported plug-ins of good quality and under the LGPL license.

Security Fix(es):

* gstreamer-plugins-good: Potential heap overwrite in gst_matroska_demux_add_wvpk_header() (CVE-2022-1920) * gstreamer-plugins-good: Heap-based buffer overflow in the avi demuxer when handling certain AVI files (CVE-2022-1921) * gstreamer-plugins-good: Potential heap overwrite in mkv demuxing using zlib decompression (CVE-2022-1922) * gstreamer-plugins-good: Potential heap overwrite in mkv demuxing using bz2 decompression (CVE-2022-1923) * gstreamer-plugins-good: Potential heap overwrite in mkv demuxing using lzo decompression (CVE-2022-1924) * gstreamer-plugins-good: Potential heap overwrite in mkv demuxing using HEADERSTRIP decompression (CVE-2022-1925) * gstreamer-plugins-good: Potential heap overwrite in mp4 demuxing using zlib decompression (CVE-2022-2122)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.

 https://cve.radiocsirt.org/vuln/bdu:2022-06448 bdu:2022-06448 2026-10-02T17:00:23.675526+00:00 bdu:2022-06448 https://cve.radiocsirt.org/vuln/euvd-2026-12046 EUVD-2026-12046 2026-10-02T17:00:23.675543+00:00 EUVD-2026-12046 https://cve.radiocsirt.org/vuln/fkie_cve-2022-1925 fkie_cve-2022-1925 2026-10-02T17:00:23.675555+00:00

DOS / potential heap overwrite in mkv demuxing using HEADERSTRIP decompression. Integer overflow in matroskaparse element in gst_matroska_decompress_data function which causes a heap overflow. Due to restrictions on chunk sizes in the matroskademux element, the overflow can't be triggered, however the matroskaparse element has no size checks.

 https://cve.radiocsirt.org/vuln/ghsa-v6c6-gcwr-p5pm GHSA-v6c6-gcwr-p5pm 2026-10-02T17:00:23.675579+00:00

DOS / potential heap overwrite in mkv demuxing using HEADERSTRIP decompression. Integer overflow in matroskaparse element in gst_matroska_decompress_data function which causes a heap overflow. Due to restrictions on chunk sizes in the matroskademux element, the overflow can't be triggered, however the matroskaparse element has no size checks.

 https://cve.radiocsirt.org/vuln/gsd-2022-1925 gsd-2022-1925 2026-10-02T17:00:23.675594+00:00 gsd-2022-1925 https://cve.radiocsirt.org/vuln/oesa-2022-1736 OESA-2022-1736 — gstreamer1-plugins-good security update 2026-10-02T17:00:23.675604+00:00

Affected: openEuler:20.03-LTS-SP1: gstreamer1-plugins-good, openEuler:20.03-LTS-SP3: gstreamer1-plugins-good, openEuler:22.03-LTS: gstreamer1-plugins-good

GStreamer is a streaming media framework, based on graphs of filters which operate on media data. Applications using this library can do anything from real-time sound processing to playing videos, and just about anything else media-related. Its plugin-based architecture means that new data types or processing capabilities can be added simply by installing new plugins. Security Fix(es): Potential heap overwrite in the mkv demuxer when handling certain Matroska files in GStreamer versions before 1.20.3.(CVE-2022-1920) Potential heap overwrite in the qt demuxer when handling certain QuickTime/MP4 files in GStreamer versions before 1.20.3.(CVE-2022-2122) Heap-based buffer overflow in the avi demuxer when handling certain AVI files in GStreamer versions before 1.20.3.(CVE-2022-1921) Potential heap overwrite in the mkv demuxer when handling certain Matroska/WebM files in GStreamer versions before 1.20.3.(CVE-2022-1922) Potential heap overwrite in the mkv demuxer when handling certain Matroska/WebM files in GStreamer versions before 1.20.3.(CVE-2022-1923) Potential heap overwrite in the mkv demuxer when handling certain Matroska/WebM files in GStreamer versions before 1.20.3.(CVE-2022-1924) Potential heap overwrite in the mkv demuxer when handling certain Matroska/WebM files in GStreamer versions before 1.20.3.(CVE-2022-1925)

 https://cve.radiocsirt.org/vuln/rhsa-2023:2260 RHSA-2023:2260 — Red Hat Security Advisory: gstreamer1-plugins-good security update 2026-10-02T17:00:23.675634+00:00

gstreamer-plugins-good: Potential heap overwrite in gst_matroska_demux_add_wvpk_header() gstreamer-plugins-good: Heap-based buffer overflow in the avi demuxer when handling certain AVI files gstreamer-plugins-good: Potential heap overwrite in mkv demuxing using zlib decompression gstreamer-plugins-good: Potential heap overwrite in mkv demuxing using bz2 decompression gstreamer-plugins-good: Potential heap overwrite in mkv demuxing using lzo decompression gstreamer-plugins-good: Potential heap overwrite in mkv demuxing using HEADERSTRIP decompression gstreamer-plugins-good: Potential heap overwrite in mp4 demuxing using zlib decompression

 https://cve.radiocsirt.org/vuln/suse-su-2022:2911-1 SUSE-SU-2022:2911-1 — Security update for gstreamer-plugins-good 2026-10-02T17:00:23.675661+00:00

Security update for gstreamer-plugins-good

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2022-1925 UBUNTU-CVE-2022-1925 2026-10-02T17:00:23.675679+00:00

Affected: Ubuntu:Pro:16.04:LTS: gst-plugins-good1.0, Ubuntu:18.04:LTS: gst-plugins-good1.0, Ubuntu:20.04:LTS: gst-plugins-good1.0, Ubuntu:22.04:LTS: gst-plugins-good1.0

DOS / potential heap overwrite in mkv demuxing using HEADERSTRIP decompression. Integer overflow in matroskaparse element in gst_matroska_decompress_data function which causes a heap overflow. Due to restrictions on chunk sizes in the matroskademux element, the overflow can't be triggered, however the matroskaparse element has no size checks.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2022-0374 WID-SEC-W-2022-0374 — GStreamer: Mehrere Schwachstellen 2026-10-02T17:00:23.675702+00:00

Ein Angreifer kann mehrere Schwachstellen in GStreamer ausnutzen, um Dateien zu manipulieren und einen Denial of Service Zustand herzustellen.