https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-04T01:33:11.642910+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/alsa-2026:53451 ALSA-2026:53451 — Moderate: gstreamer1-plugins-good security update 2026-10-04T01:33:11.969600+00:00

Affected: AlmaLinux:10: gstreamer1-plugins-good, AlmaLinux:10: gstreamer1-plugins-good-gtk

GStreamer is a streaming media framework based on graphs of filters which operate on media data. The gstreamer1-plugins-good packages contain a collection of well-supported plug-ins of good quality and under the LGPL license.

Security Fix(es):

* gst-plugins-good: gst-plugins-good: unbounded memory growth in rtph264depay and rtph265depay RTP depayloaders (CVE-2026-18649)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

 https://cve.radiocsirt.org/vuln/euvd-2026-374174 EUVD-2026-374174 2026-10-04T01:33:11.969662+00:00 EUVD-2026-374174 https://cve.radiocsirt.org/vuln/fkie_cve-2026-18649 fkie_cve-2026-18649 2026-10-04T01:33:11.969679+00:00

A flaw was found in the GStreamer gst-plugins-good package. The rtph264depay and rtph265depay RTP depayloader elements do not enforce a maximum size limit on the reassembly buffer used during fragmented RTP packet processing. A remote, unauthenticated attacker can send a continuous stream of RTP fragments without ever transmitting an end-of-fragment marker, causing the reassembly buffer to grow without bound until process memory is exhausted. This results in a denial of service through process termination.

 https://cve.radiocsirt.org/vuln/ghsa-wr93-5xph-995g GHSA-wr93-5xph-995g 2026-10-04T01:33:11.969704+00:00

A flaw was found in the GStreamer gst-plugins-good package. The rtph264depay and rtph265depay RTP depayloader elements do not enforce a maximum size limit on the reassembly buffer used during fragmented RTP packet processing. A remote, unauthenticated attacker can send a continuous stream of RTP fragments without ever transmitting an end-of-fragment marker, causing the reassembly buffer to grow without bound until process memory is exhausted. This results in a denial of service through process termination.

 https://cve.radiocsirt.org/vuln/rhsa-2026:53451 RHSA-2026:53451 — Red Hat Security Advisory: gstreamer1-plugins-good security update 2026-10-04T01:33:11.969721+00:00

gstreamer1-plugins-good: gst-plugins-good: unbounded memory growth in rtph264depay and rtph265depay RTP depayloaders

 https://cve.radiocsirt.org/vuln/rhsa-2026:61588 RHSA-2026:61588 — Red Hat Security Advisory: gstreamer1-plugins-good security update 2026-10-04T01:33:11.969740+00:00

gstreamer1-plugins-good: gst-plugins-good: unbounded memory growth in rtph264depay and rtph265depay RTP depayloaders

 https://cve.radiocsirt.org/vuln/rlsa-2026:53451 RLSA-2026:53451 — Moderate: gstreamer1-plugins-good security update 2026-10-04T01:33:11.969755+00:00

Affected: Rocky Linux:10: gstreamer1-plugins-good

GStreamer is a streaming media framework based on graphs of filters which operate on media data. The gstreamer1-plugins-good packages contain a collection of well-supported plug-ins of good quality and under the LGPL license.

Security Fix(es):

* gst-plugins-good: gst-plugins-good: unbounded memory growth in rtph264depay and rtph265depay RTP depayloaders (CVE-2026-18649)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2026-18649 UBUNTU-CVE-2026-18649 2026-10-04T01:33:11.969778+00:00

Affected: Ubuntu:Pro:16.04:LTS: gst-plugins-good1.0, Ubuntu:Pro:18.04:LTS: gst-plugins-good1.0, Ubuntu:Pro:20.04:LTS: gst-plugins-good1.0, Ubuntu:22.04:LTS: gst-plugins-good1.0, Ubuntu:24.04:LTS: gst-plugins-good1.0, Ubuntu:26.04:LTS: gst-plugins-good1.0

A flaw was found in the GStreamer gst-plugins-good package. The rtph264depay and rtph265depay RTP depayloader elements do not enforce a maximum size limit on the reassembly buffer used during fragmented RTP packet processing. A remote, unauthenticated attacker can send a continuous stream of RTP fragments without ever transmitting an end-of-fragment marker, causing the reassembly buffer to grow without bound until process memory is exhausted. This results in a denial of service through process termination.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2026-2662 WID-SEC-W-2026-2662 — GStreamer: Mehrere Schwachstellen 2026-10-04T01:33:11.969806+00:00

Ein Angreifer kann mehrere Schwachstellen in GStreamer ausnutzen, um Daten zu beschädigen, einen Denial-of-Service-Zustand herbeizuführen, vertrauliche Informationen offenzulegen oder möglicherweise beliebigen Code auszuführen.