Most recent entries from all

ALSA-2026:59097 — Important: gstreamer1-plugins-base security update

Affected: AlmaLinux:10: gstreamer1-plugins-base, AlmaLinux:10: gstreamer1-plugins-base-devel, AlmaLinux:10: gstreamer1-plugins-base-tools

GStreamer is a streaming media framework based on graphs of filters which operate on media data. The gstreamer1-plugins-base packages contain a collection of well-maintained base plug-ins.

Security Fix(es):

* gstreamer: GStreamer: Arbitrary code execution via OGG file parsing buffer overflow (CVE-2026-18297)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

BELL-CVE-2026-18297

Affected: Alpaquita:23: gst-plugins-base, Alpaquita:25: gst-plugins-base, Alpaquita:stream: gst-plugins-base

EUVD-2026-360150

fkie_cve-2026-18297

The specific flaw exists within the parsing of OGG files. The issue results from the lack of proper validation of the length of user-supplied data prior to copying it to a stack-based buffer. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-29584.

GHSA-gqxr-5q6c-5cqh

RHSA-2026:59097 — Red Hat Security Advisory: gstreamer1-plugins-base security update

gstreamer-plugins-base: GStreamer: Arbitrary code execution via OGG file parsing buffer overflow

RHSA-2026:67891 — Red Hat Security Advisory: gstreamer1-plugins-base security update

gstreamer-plugins-base: GStreamer: Arbitrary code execution via OGG file parsing buffer overflow

RLSA-2026:59097 — Important: gstreamer1-plugins-base security update

Affected: Rocky Linux:10: gstreamer1-plugins-base

GStreamer is a streaming media framework based on graphs of filters which operate on media data. The gstreamer1-plugins-base packages contain a collection of well-maintained base plug-ins.

Security Fix(es):

* gstreamer: GStreamer: Arbitrary code execution via OGG file parsing buffer overflow (CVE-2026-18297)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

UBUNTU-CVE-2026-18297

Affected: Ubuntu:Pro:16.04:LTS: gst-plugins-base1.0, Ubuntu:Pro:18.04:LTS: gst-plugins-base1.0, Ubuntu:Pro:20.04:LTS: gst-plugins-base1.0, Ubuntu:22.04:LTS: gst-plugins-base1.0, Ubuntu:24.04:LTS: gst-plugins-base1.0, Ubuntu:26.04:LTS: gst-plugins-base1.0

GStreamer OGG File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of GStreamer. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of OGG files. The issue results from the lack of proper validation of the length of user-supplied data prior to copying it to a stack-based buffer. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-29584.

WID-SEC-W-2026-2259 — GStreamer: Mehrere Schwachstellen

Ein Angreifer kann mehrere Schwachstellen in GStreamer ausnutzen, um möglicherweise beliebigen Code auszuführen, Daten zu manipulieren oder einen Denial-of-Service-Zustand auszulösen.