Red Hat Security Advisory: gstreamer-plugins-base and gstreamer-plugins-good security update
Multiple security vulnerabilities have been identified in the GStreamer streaming media framework, specifically in the gstreamer-plugins-base and gstreamer-plugins-good packages used in Red Hat Enterprise Linux 7 Extended Lifecycle Support. These include remote code execution via heap-based buffer overflow and out-of-bounds write in the rtpqdm2depay plugin, as well as arbitrary code execution through an integer overflow in AVI file handling. Red Hat has issued an important security advisory with updates addressing these issues.
AI Analysis
Technical Summary
This advisory covers three security vulnerabilities in GStreamer plugins: CVE-2026-3085 (heap-based buffer overflow in rtpqdm2depay leading to remote code execution), CVE-2026-2921 (integer overflow in RIFF palette handling in AVI files allowing arbitrary code execution), and CVE-2026-3083 (out-of-bounds write in rtpqdm2depay causing remote code execution). These vulnerabilities affect the gstreamer-plugins-base and gstreamer-plugins-good packages in Red Hat Enterprise Linux 7 Extended Lifecycle Support. The vendor has released updated packages to fix these issues.
Potential Impact
Successful exploitation of these vulnerabilities could allow an attacker to execute arbitrary code remotely on affected systems, potentially leading to full system compromise. The vulnerabilities arise from memory corruption issues such as buffer overflows and integer overflows in media processing plugins, which are commonly used in applications handling streaming media data.
Mitigation Recommendations
Red Hat has released updated packages for gstreamer-plugins-base and gstreamer-plugins-good addressing these vulnerabilities. Users of Red Hat Enterprise Linux 7 Extended Lifecycle Support should apply the security updates as described in Red Hat advisory RHSA-2026:7850 and the related article https://access.redhat.com/articles/11258. No additional mitigation steps are indicated beyond applying the official patches.
Red Hat Security Advisory: gstreamer-plugins-base and gstreamer-plugins-good security update
Description
Multiple security vulnerabilities have been identified in the GStreamer streaming media framework, specifically in the gstreamer-plugins-base and gstreamer-plugins-good packages used in Red Hat Enterprise Linux 7 Extended Lifecycle Support. These include remote code execution via heap-based buffer overflow and out-of-bounds write in the rtpqdm2depay plugin, as well as arbitrary code execution through an integer overflow in AVI file handling. Red Hat has issued an important security advisory with updates addressing these issues.
Affected software
pkg:rpm/redhat/gstreamer-plugins-basepkg:rpm/redhat/gstreamer-plugins-goodRun on your own infrastructure? Check whether these packages are installed with threat-finder — our free open-source scanner.
AI-Powered Analysis
Machine-generated threat intelligence
Technical Analysis
This advisory covers three security vulnerabilities in GStreamer plugins: CVE-2026-3085 (heap-based buffer overflow in rtpqdm2depay leading to remote code execution), CVE-2026-2921 (integer overflow in RIFF palette handling in AVI files allowing arbitrary code execution), and CVE-2026-3083 (out-of-bounds write in rtpqdm2depay causing remote code execution). These vulnerabilities affect the gstreamer-plugins-base and gstreamer-plugins-good packages in Red Hat Enterprise Linux 7 Extended Lifecycle Support. The vendor has released updated packages to fix these issues.
Potential Impact
Successful exploitation of these vulnerabilities could allow an attacker to execute arbitrary code remotely on affected systems, potentially leading to full system compromise. The vulnerabilities arise from memory corruption issues such as buffer overflows and integer overflows in media processing plugins, which are commonly used in applications handling streaming media data.
Mitigation Recommendations
Red Hat has released updated packages for gstreamer-plugins-base and gstreamer-plugins-good addressing these vulnerabilities. Users of Red Hat Enterprise Linux 7 Extended Lifecycle Support should apply the security updates as described in Red Hat advisory RHSA-2026:7850 and the related article https://access.redhat.com/articles/11258. No additional mitigation steps are indicated beyond applying the official patches.
Technical Details
- Gcve Source
- db.gcve.eu
- Csaf Category
- csaf_security_advisory
- Csaf Version
- 2.0
- Publisher
- Red Hat Product Security
- Advisory Id
- RHSA-2026:7850
- Cve Count
- 3
- Additional Cves
- ["CVE-2026-3083","CVE-2026-3085"]
- Cvss Version
- null
Threat ID: 6a3da1be4853345fc181bd0a
Added to database: 06/25/2026, 21:46:38 UTC
Last enriched: 07/20/2026, 21:00:43 UTC
Last updated: 08/11/2026, 12:41:09 UTC
Views: 91
Community Reviews
0 reviewsCrowdsource mitigation strategies, share intel context, and vote on the most helpful responses. Sign in to add your voice and help keep defenders ahead.
Want to contribute mitigation steps or threat intel context? Sign in or create an account to join the community discussion.
Actions
Updates to AI analysis require Pro Console access. Upgrade inside Console → Billing.
Need more coverage?
Upgrade to Pro Console for AI refresh and higher limits.
For incident response and remediation, OffSeq services can help resolve threats faster.
Latest Threats
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.