DeutschIn der Originalsprache angezeigt — eine vollständige Übersetzung ist für eine zukünftige Version geplant.
GStreamer: Mehrere Schwachstellen
Advisory ansehen veröffentlicht 2026-02-25
Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in GStreamer ausnutzen, um einen Denial-of-Service-Zustand zu verursachen, Speicherbeschädigungen durchzuführen und möglicherweise beliebigen Code auszuführen.
01
beschreibt (13)
Zugehörige CVEs.
| ID | Schweregrad | ausnutzbar | ||
|---|---|---|---|---|
| CVE-2026-1940US | high7.5 | — | ||
An incomplete fix for CVE-2024-47778 allows an out-of-bounds read in gst_wavparse_adtl_chunk() function. The patch added a size validation check lsize + 8 > size, but it does not a… | ||||
| CVE-2026-3086US | — | — | ||
GStreamer H.266 Codec Parser Out-Of-Bounds Write Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations… | ||||
| CVE-2026-3085US | — | — | ||
GStreamer rtpqdm2depay Heap-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installation… | ||||
| CVE-2026-3084US | — | — | ||
GStreamer H.266 Codec Parser Integer Underflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations o… | ||||
| CVE-2026-3083US | — | — | ||
GStreamer rtpqdm2depay Out-Of-Bounds Write Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of GS… | ||||
| CVE-2026-3082US | — | — | ||
GStreamer JPEG Parser Heap-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations… | ||||
| CVE-2026-3081US | — | — | ||
GStreamer H.266 Codec Parser Stack-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected insta… | ||||
| CVE-2026-2923US | — | — | ||
GStreamer DVB Subtitles Out-Of-Bounds Write Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of G… | ||||
| CVE-2026-2922US | — | — | ||
GStreamer RealMedia Demuxer Out-Of-Bounds Write Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations… | ||||
| CVE-2026-2921US | — | — | ||
GStreamer RIFF Palette Integer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of GStre… | ||||
| CVE-2026-2920US | — | — | ||
GStreamer ASF Demuxer Heap-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations… | ||||
| CVE-2026-39043US | — | — | ||
| CVE-2026-39044US | — | — | ||
02
Referenzen
Externe Belege — Patches, Meldungen, Analysen.
- Red Hat Security Advisory RHSA-2026:19024 vom 2026-05-19external
- Red Hat Security Advisory RHSA-2026:19180 vom 2026-05-20external
- Red Hat Security Advisory RHSA-2026:6259 vom 2026-03-31external
- Red Hat Security Advisory RHSA-2026:6300 vom 2026-03-31external
- Red Hat Security Advisory RHSA-2026:6750 vom 2026-04-07external
- Red Hat Security Advisory RHSA-2026:7673 vom 2026-04-13external
- Red Hat Security Advisory RHSA-2026:7850 vom 2026-04-13external
- Red Hat Security Advisory RHSA-2026:8854 vom 2026-04-20external
scry
Advisories wie diese benennen die exponierten Produkte, die Angreifer auf Ihrer Angriffsfläche ins Visier nehmen. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.
Kostenloser Scan