https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-02T20:53:17.820109+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/alsa-2026:19024 ALSA-2026:19024 — Important: gstreamer1-plugins-bad-free, gstreamer1-plugins-base, gstreamer1-plugins-good, and gstreamer1-plugins-ugly-f… 2026-10-02T20:53:18.121906+00:00

Affected: AlmaLinux:10: gstreamer1-plugins-bad-free, AlmaLinux:10: gstreamer1-plugins-bad-free-devel, AlmaLinux:10: gstreamer1-plugins-bad-free-libs, AlmaLinux:10: gstreamer1-plugins-base, AlmaLinux:10: gstreamer1-plugins-base-devel, AlmaLinux:10: gstreamer1-plugins-base-tools, AlmaLinux:10: gstreamer1-plugins-good, AlmaLinux:10: gstreamer1-plugins-good-gtk, AlmaLinux:10: gstreamer1-plugins-ugly-free

GStreamer is a streaming media framework based on graphs of filters which operate on media data. The gstreamer1-plugins-bad-free package contains a collection of plug-ins for GStreamer.

Security Fix(es):

* GStreamer: GStreamer: Arbitrary code execution via ASF file processing (CVE-2026-2920) * GStreamer: GStreamer: Remote Code Execution via heap-based buffer overflow in JPEG parser (CVE-2026-3082) * GStreamer: GStreamer: Remote Code Execution via Heap-based Buffer Overflow in rtpqdm2depay (CVE-2026-3085) * GStreamer: GStreamer: Arbitrary code execution via RIFF palette integer overflow in AVI file handling (CVE-2026-2921) * GStreamer: GStreamer: Remote Code Execution via Out-Of-Bounds Write in rtpqdm2depay (CVE-2026-3083) * GStreamer: GStreamer: Remote Code Execution via out-of-bounds write in RealMedia Demuxer (CVE-2026-2922) * GStreamer: GStreamer: Remote Code Execution via out-of-bounds write in DVB Subtitles handling (CVE-2026-2923)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

 https://cve.radiocsirt.org/vuln/bdu:2026-06661 bdu:2026-06661 2026-10-02T20:53:18.121994+00:00 bdu:2026-06661 https://cve.radiocsirt.org/vuln/euvd-2026-339105 EUVD-2026-339105 2026-10-02T20:53:18.122011+00:00 EUVD-2026-339105 https://cve.radiocsirt.org/vuln/fkie_cve-2026-2923 fkie_cve-2026-2923 2026-10-02T20:53:18.122024+00:00

GStreamer DVB Subtitles Out-Of-Bounds Write Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of GStreamer. Interaction with this library is required to exploit this vulnerability but attack vectors may vary depending on the implementation.

The specific flaw exists within the handling of coordinates. The issue results from the lack of proper validation of user-supplied data, which can result in a write past the end of an allocated buffer. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-28838.

 https://cve.radiocsirt.org/vuln/ghsa-52ch-r2h3-gxrq GHSA-52ch-r2h3-gxrq 2026-10-02T20:53:18.122049+00:00

GStreamer DVB Subtitles Out-Of-Bounds Write Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of GStreamer. Interaction with this library is required to exploit this vulnerability but attack vectors may vary depending on the implementation.

The specific flaw exists within the handling of coordinates. The issue results from the lack of proper validation of user-supplied data, which can result in a write past the end of an allocated buffer. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-28838.

 https://cve.radiocsirt.org/vuln/oesa-2026-2830 OESA-2026-2830 — gstreamer1-plugins-bad-free security update 2026-10-02T20:53:18.122068+00:00

Affected: openEuler:24.03-LTS-SP1: gstreamer1-plugins-bad-free

GStreamer is a pipeline-based multi media framework that links together a wide variety of media processing systems to complete complex workflows, based on graphs of filters which operate on media data. This package contains plug-ins that are not tested well enough yet, or the code is not of good enough quality. Security Fix(es):

GStreamer DVB Subtitles Out-Of-Bounds Write Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of GStreamer. Interaction with this library is required to exploit this vulnerability but attack vectors may vary depending on the implementation.

The specific flaw exists within the handling of coordinates. The issue results from the lack of proper validation of user-supplied data, which can result in a write past the end of an allocated buffer. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-28838.(CVE-2026-2923)

 https://cve.radiocsirt.org/vuln/rhsa-2026:19024 RHSA-2026:19024 — Red Hat Security Advisory: gstreamer1-plugins-bad-free, gstreamer1-plugins-base, gstreamer1-plugins-good, and gstreamer… 2026-10-02T20:53:18.122094+00:00

gstreamer-plugins-ugly: GStreamer: Arbitrary code execution via ASF file processing gstreamer-plugins-base: GStreamer: Arbitrary code execution via RIFF palette integer overflow in AVI file handling gstreamer-plugins-ugly: GStreamer: Remote Code Execution via out-of-bounds write in RealMedia Demuxer gstreamer-plugins-bad: GStreamer: Remote Code Execution via out-of-bounds write in DVB Subtitles handling gstreamer-plugins-bad: GStreamer: Remote Code Execution via heap-based buffer overflow in JPEG parser gstreamer-plugins-good: GStreamer: Remote Code Execution via Out-Of-Bounds Write in rtpqdm2depay gstreamer-plugins-good: GStreamer: Remote Code Execution via Heap-based Buffer Overflow in rtpqdm2depay

 https://cve.radiocsirt.org/vuln/rhsa-2026:8854 RHSA-2026:8854 — Red Hat Security Advisory: gstreamer1-plugins-bad-free, gstreamer1-plugins-base, gstreamer1-plugins-good, and gstreamer… 2026-10-02T20:53:18.122125+00:00

gstreamer-plugins-ugly: GStreamer: Arbitrary code execution via ASF file processing gstreamer-plugins-base: GStreamer: Arbitrary code execution via RIFF palette integer overflow in AVI file handling gstreamer-plugins-ugly: GStreamer: Remote Code Execution via out-of-bounds write in RealMedia Demuxer gstreamer-plugins-bad: GStreamer: Remote Code Execution via out-of-bounds write in DVB Subtitles handling gstreamer-plugins-bad: GStreamer: Remote Code Execution via heap-based buffer overflow in JPEG parser gstreamer-plugins-good: GStreamer: Remote Code Execution via Out-Of-Bounds Write in rtpqdm2depay gstreamer-plugins-good: GStreamer: Remote Code Execution via Heap-based Buffer Overflow in rtpqdm2depay

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2026-2923 UBUNTU-CVE-2026-2923 2026-10-02T20:53:18.122152+00:00

Affected: Ubuntu:Pro:14.04:LTS: gst-plugins-bad1.0, Ubuntu:Pro:16.04:LTS: gst-plugins-bad1.0, Ubuntu:Pro:18.04:LTS: gst-plugins-bad1.0, Ubuntu:Pro:20.04:LTS: gst-plugins-bad1.0, Ubuntu:Pro:22.04:LTS: gst-plugins-bad1.0, Ubuntu:Pro:24.04:LTS: gst-plugins-bad1.0, Ubuntu:25.10: gst-plugins-bad1.0

GStreamer DVB Subtitles Out-Of-Bounds Write Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of GStreamer. Interaction with this library is required to exploit this vulnerability but attack vectors may vary depending on the implementation. The specific flaw exists within the handling of coordinates. The issue results from the lack of proper validation of user-supplied data, which can result in a write past the end of an allocated buffer. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-28838.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2026-0525 WID-SEC-W-2026-0525 — GStreamer: Mehrere Schwachstellen 2026-10-02T20:53:18.122183+00:00

Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in GStreamer ausnutzen, um einen Denial-of-Service-Zustand zu verursachen, Speicherbeschädigungen durchzuführen und möglicherweise beliebigen Code auszuführen.