https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-02T19:39:38.885638+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bdu:2026-06667 bdu:2026-06667 2026-10-02T19:39:38.889555+00:00 bdu:2026-06667 https://cve.radiocsirt.org/vuln/euvd-2026-337359 EUVD-2026-337359 2026-10-02T19:39:38.889598+00:00 EUVD-2026-337359 https://cve.radiocsirt.org/vuln/fkie_cve-2026-3086 fkie_cve-2026-3086 2026-10-02T19:39:38.889612+00:00

GStreamer H.266 Codec Parser Out-Of-Bounds Write Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of GStreamer. Interaction with this library is required to exploit this vulnerability but attack vectors may vary depending on the implementation.

The specific flaw exists within the processing of APS units. The issue results from the lack of proper validation of user-supplied data, which can result in a write past the end of an allocated buffer. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-28911.

 https://cve.radiocsirt.org/vuln/ghsa-x6f2-qq5v-gx79 GHSA-x6f2-qq5v-gx79 2026-10-02T19:39:38.889643+00:00

GStreamer H.266 Codec Parser Out-Of-Bounds Write Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of GStreamer. Interaction with this library is required to exploit this vulnerability but attack vectors may vary depending on the implementation.

The specific flaw exists within the processing of APS units. The issue results from the lack of proper validation of user-supplied data, which can result in a write past the end of an allocated buffer. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-28911.

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2026-3086 UBUNTU-CVE-2026-3086 2026-10-02T19:39:38.889661+00:00

Affected: Ubuntu:Pro:14.04:LTS: gst-plugins-bad1.0, Ubuntu:Pro:16.04:LTS: gst-plugins-bad1.0, Ubuntu:Pro:18.04:LTS: gst-plugins-bad1.0, Ubuntu:Pro:20.04:LTS: gst-plugins-bad1.0, Ubuntu:Pro:22.04:LTS: gst-plugins-bad1.0, Ubuntu:Pro:24.04:LTS: gst-plugins-bad1.0, Ubuntu:25.10: gst-plugins-bad1.0

GStreamer H.266 Codec Parser Out-Of-Bounds Write Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of GStreamer. Interaction with this library is required to exploit this vulnerability but attack vectors may vary depending on the implementation. The specific flaw exists within the processing of APS units. The issue results from the lack of proper validation of user-supplied data, which can result in a write past the end of an allocated buffer. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-28911.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2026-0525 WID-SEC-W-2026-0525 — GStreamer: Mehrere Schwachstellen 2026-10-02T19:39:38.889692+00:00

Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in GStreamer ausnutzen, um einen Denial-of-Service-Zustand zu verursachen, Speicherbeschädigungen durchzuführen und möglicherweise beliebigen Code auszuführen.