https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-04T13:58:29.192079+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/alsa-2026:59097 ALSA-2026:59097 — Important: gstreamer1-plugins-base security update 2026-10-04T13:58:29.513261+00:00

Affected: AlmaLinux:10: gstreamer1-plugins-base, AlmaLinux:10: gstreamer1-plugins-base-devel, AlmaLinux:10: gstreamer1-plugins-base-tools

GStreamer is a streaming media framework based on graphs of filters which operate on media data. The gstreamer1-plugins-base packages contain a collection of well-maintained base plug-ins.

Security Fix(es):

* gstreamer: GStreamer: Arbitrary code execution via OGG file parsing buffer overflow (CVE-2026-18297)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

 https://cve.radiocsirt.org/vuln/bell-cve-2026-18297 BELL-CVE-2026-18297 2026-10-04T13:58:29.513325+00:00

Affected: Alpaquita:23: gst-plugins-base, Alpaquita:25: gst-plugins-base, Alpaquita:stream: gst-plugins-base

 https://cve.radiocsirt.org/vuln/euvd-2026-360150 EUVD-2026-360150 2026-10-04T13:58:29.513351+00:00 EUVD-2026-360150 https://cve.radiocsirt.org/vuln/fkie_cve-2026-18297 fkie_cve-2026-18297 2026-10-04T13:58:29.513364+00:00

GStreamer OGG File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of GStreamer. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file.

The specific flaw exists within the parsing of OGG files. The issue results from the lack of proper validation of the length of user-supplied data prior to copying it to a stack-based buffer. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-29584.

 https://cve.radiocsirt.org/vuln/ghsa-gqxr-5q6c-5cqh GHSA-gqxr-5q6c-5cqh 2026-10-04T13:58:29.513392+00:00

GStreamer OGG File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of GStreamer. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file.

The specific flaw exists within the parsing of OGG files. The issue results from the lack of proper validation of the length of user-supplied data prior to copying it to a stack-based buffer. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-29584.

 https://cve.radiocsirt.org/vuln/rhsa-2026:59097 RHSA-2026:59097 — Red Hat Security Advisory: gstreamer1-plugins-base security update 2026-10-04T13:58:29.513410+00:00

gstreamer-plugins-base: GStreamer: Arbitrary code execution via OGG file parsing buffer overflow

 https://cve.radiocsirt.org/vuln/rhsa-2026:67891 RHSA-2026:67891 — Red Hat Security Advisory: gstreamer1-plugins-base security update 2026-10-04T13:58:29.513429+00:00

gstreamer-plugins-base: GStreamer: Arbitrary code execution via OGG file parsing buffer overflow

 https://cve.radiocsirt.org/vuln/rlsa-2026:59097 RLSA-2026:59097 — Important: gstreamer1-plugins-base security update 2026-10-04T13:58:29.513444+00:00

Affected: Rocky Linux:10: gstreamer1-plugins-base

GStreamer is a streaming media framework based on graphs of filters which operate on media data. The gstreamer1-plugins-base packages contain a collection of well-maintained base plug-ins.

Security Fix(es):

* gstreamer: GStreamer: Arbitrary code execution via OGG file parsing buffer overflow (CVE-2026-18297)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2026-18297 UBUNTU-CVE-2026-18297 2026-10-04T13:58:29.513467+00:00

Affected: Ubuntu:Pro:16.04:LTS: gst-plugins-base1.0, Ubuntu:Pro:18.04:LTS: gst-plugins-base1.0, Ubuntu:Pro:20.04:LTS: gst-plugins-base1.0, Ubuntu:22.04:LTS: gst-plugins-base1.0, Ubuntu:24.04:LTS: gst-plugins-base1.0, Ubuntu:26.04:LTS: gst-plugins-base1.0

GStreamer OGG File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of GStreamer. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of OGG files. The issue results from the lack of proper validation of the length of user-supplied data prior to copying it to a stack-based buffer. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-29584.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2026-2259 WID-SEC-W-2026-2259 — GStreamer: Mehrere Schwachstellen 2026-10-04T13:58:29.513495+00:00

Ein Angreifer kann mehrere Schwachstellen in GStreamer ausnutzen, um möglicherweise beliebigen Code auszuführen, Daten zu manipulieren oder einen Denial-of-Service-Zustand auszulösen.