DeutschIn der Originalsprache angezeigt — eine vollständige Übersetzung ist für eine zukünftige Version geplant.
GStreamer: Mehrere Schwachstellen
Advisory ansehen veröffentlicht 2026-06-14
Ein Angreifer kann mehrere Schwachstellen in GStreamer ausnutzen, um einen Denial of Service Angriff durchzuführen, Daten zu manipulieren oder vertrauliche Informationen offenzulegen.
01
beschreibt (11)
Zugehörige CVEs.
| ID | Schweregrad | ausnutzbar | ||
|---|---|---|---|---|
| CVE-2026-53705US | — | — | ||
A flaw was found in GStreamer's WavPack audio decoder in gst-plugins-good. When processing a specially crafted WavPack file, an integer overflow in the buffer size calculation (4 *… | ||||
| CVE-2026-53704US | — | — | ||
A flaw was found in GStreamer's RealMedia demuxer in the gst-plugins-ugly package. When processing a RealMedia file containing a specially crafted FILEINFO metadata section, the de… | ||||
| CVE-2026-53703US | — | — | ||
A vulnerability was found in the GStreamer RealMedia demuxer (gst-plugins-ugly). When processing a RealMedia (.rm) file, the demuxer parses MDPR (media properties) chunks to config… | ||||
| CVE-2026-52722US | — | — | ||
A signed integer overflow vulnerability was found in GStreamer's VMnc decoder. A crafted VMnc stream with large cursor dimensions can overflow signed integer payload-size arithmeti… | ||||
| CVE-2026-52721US | — | — | ||
Multiple out-of-bounds read vulnerabilities were found in GStreamer's pcapparse element. Malformed PCAP records can trigger reads beyond buffer boundaries during IPv4/TCP header pa… | ||||
| CVE-2026-52720US | — | — | ||
A heap buffer overflow vulnerability was found in GStreamer's librfb (RFB/VNC client). The rectangle bounds check incorrectly validates area rather than individual dimensions, allo… | ||||
| CVE-2026-52719US | — | — | ||
An out-of-bounds read vulnerability was found in the VA JPEG decoder in GStreamer's gst-plugins-bad. The JPEG parser reads a segment length value from the bitstream without validat… | ||||
| CVE-2026-52718US | — | — | ||
A denial of service vulnerability was found in GStreamer's AV1 codec parser in gst-plugins-bad. The gst_av1_parser_parse_tile_list_obu() function passes a byte count to a bit-reade… | ||||
| CVE-2026-53702US | — | — | ||
A stack buffer overflow flaw was found in the GStreamer H.265 codec parser library (gst-plugins-bad). When parsing a buffering period SEI message, the parser uses an incorrect loop… | ||||
| CVE-2026-12893US | — | — | ||
| CVE-2026-52717US | — | — | ||
02
Referenzen
Externe Belege — Patches, Meldungen, Analysen.
- Red Hat Security Advisory RHSA-2026:36673 vom 2026-07-08external
- Red Hat Security Advisory RHSA-2026:36674 vom 2026-07-08external
- Red Hat Security Advisory RHSA-2026:36675 vom 2026-07-08external
- Red Hat Security Advisory RHSA-2026:36749 vom 2026-07-08external
- Red Hat Security Advisory RHSA-2026:36774 vom 2026-07-08external
- Red Hat Security Advisory RHSA-2026:36834 vom 2026-07-09external
- Red Hat Security Advisory RHSA-2026:37130 vom 2026-07-09external
- Red Hat Security Advisory RHSA-2026:47032 vom 2026-07-28external
scry
Advisories wie diese benennen die exponierten Produkte, die Angreifer auf Ihrer Angriffsfläche ins Visier nehmen. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.
Kostenloser Scan