Red Hat Security Advisory: gstreamer1-plugins-bad-free, gstreamer1-plugins-base, gstreamer1-plugins-good, and gstreamer1-plugins-ugly-free security update
GStreamer is a streaming media framework based on graphs of filters which operate on media data. The gstreamer1-plugins-bad-free package contains a collection of plug-ins for GStreamer. Security Fix(es): * GStreamer: GStreamer: Arbitrary code execution via ASF file processing (CVE-2026-2920) * GStreamer: GStreamer: Remote Code Execution via heap-based buffer overflow in JPEG parser (CVE-2026-3082) * GStreamer: GStreamer: Remote Code Execution via Heap-based Buffer Overflow in rtpqdm2depay (CVE-2026-3085) * GStreamer: GStreamer: Arbitrary code execution via RIFF palette integer overflow in AVI file handling (CVE-2026-2921) * GStreamer: GStreamer: Remote Code Execution via Out-Of-Bounds Write in rtpqdm2depay (CVE-2026-3083) * GStreamer: GStreamer: Remote Code Execution via out-of-bounds write in RealMedia Demuxer (CVE-2026-2922) * GStreamer: GStreamer: Remote Code Execution via out-of-bounds write in DVB Subtitles handling (CVE-2026-2923) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
AI Analysis
Technical Summary
The Red Hat security advisory RHSA-2026:19180 addresses seven distinct vulnerabilities in GStreamer and its plugin packages that could allow arbitrary or remote code execution. The flaws involve heap-based buffer overflows (CVE-2026-3082, CVE-2026-3085), integer overflow (CVE-2026-2921), and out-of-bounds writes (CVE-2026-3083, CVE-2026-2922, CVE-2026-2923) in components handling ASF, JPEG, AVI, RTP, RealMedia, and DVB subtitles media formats. These vulnerabilities affect Red Hat Enterprise Linux 9 and related variants. The advisory provides updated packages to remediate these issues.
Potential Impact
Successful exploitation of these vulnerabilities could lead to arbitrary code execution or remote code execution on affected systems, potentially allowing attackers to execute malicious code with the privileges of the user running GStreamer. This poses a significant security risk for systems processing untrusted media content.
Mitigation Recommendations
Red Hat has released updated packages for gstreamer1-plugins-bad-free, gstreamer1-plugins-base, gstreamer1-plugins-good, and gstreamer1-plugins-ugly-free to address these vulnerabilities. Users should apply the security updates as detailed in the Red Hat advisory RHSA-2026:19180 and the referenced article https://access.redhat.com/articles/11258 to remediate the issues. Patch status is confirmed with official fixes available.
Red Hat Security Advisory: gstreamer1-plugins-bad-free, gstreamer1-plugins-base, gstreamer1-plugins-good, and gstreamer1-plugins-ugly-free security update
Description
GStreamer is a streaming media framework based on graphs of filters which operate on media data. The gstreamer1-plugins-bad-free package contains a collection of plug-ins for GStreamer. Security Fix(es): * GStreamer: GStreamer: Arbitrary code execution via ASF file processing (CVE-2026-2920) * GStreamer: GStreamer: Remote Code Execution via heap-based buffer overflow in JPEG parser (CVE-2026-3082) * GStreamer: GStreamer: Remote Code Execution via Heap-based Buffer Overflow in rtpqdm2depay (CVE-2026-3085) * GStreamer: GStreamer: Arbitrary code execution via RIFF palette integer overflow in AVI file handling (CVE-2026-2921) * GStreamer: GStreamer: Remote Code Execution via Out-Of-Bounds Write in rtpqdm2depay (CVE-2026-3083) * GStreamer: GStreamer: Remote Code Execution via out-of-bounds write in RealMedia Demuxer (CVE-2026-2922) * GStreamer: GStreamer: Remote Code Execution via out-of-bounds write in DVB Subtitles handling (CVE-2026-2923) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Affected software
AI-Powered Analysis
Machine-generated threat intelligence
Technical Analysis
The Red Hat security advisory RHSA-2026:19180 addresses seven distinct vulnerabilities in GStreamer and its plugin packages that could allow arbitrary or remote code execution. The flaws involve heap-based buffer overflows (CVE-2026-3082, CVE-2026-3085), integer overflow (CVE-2026-2921), and out-of-bounds writes (CVE-2026-3083, CVE-2026-2922, CVE-2026-2923) in components handling ASF, JPEG, AVI, RTP, RealMedia, and DVB subtitles media formats. These vulnerabilities affect Red Hat Enterprise Linux 9 and related variants. The advisory provides updated packages to remediate these issues.
Potential Impact
Successful exploitation of these vulnerabilities could lead to arbitrary code execution or remote code execution on affected systems, potentially allowing attackers to execute malicious code with the privileges of the user running GStreamer. This poses a significant security risk for systems processing untrusted media content.
Mitigation Recommendations
Red Hat has released updated packages for gstreamer1-plugins-bad-free, gstreamer1-plugins-base, gstreamer1-plugins-good, and gstreamer1-plugins-ugly-free to address these vulnerabilities. Users should apply the security updates as detailed in the Red Hat advisory RHSA-2026:19180 and the referenced article https://access.redhat.com/articles/11258 to remediate the issues. Patch status is confirmed with official fixes available.
Technical Details
- Gcve Source
- db.gcve.eu
- Csaf Category
- csaf_security_advisory
- Csaf Version
- 2.0
- Publisher
- Red Hat Product Security
- Advisory Id
- RHSA-2026:19180
- Cve Count
- 7
- Additional Cves
- ["CVE-2026-2921","CVE-2026-2922","CVE-2026-2923","CVE-2026-3082","CVE-2026-3083","CVE-2026-3085"]
- Cvss Version
- null
Threat ID: 6a3da1c54853345fc181ff88
Added to database: 06/25/2026, 21:46:45 UTC
Last enriched: 06/25/2026, 21:57:24 UTC
Last updated: 06/28/2026, 02:51:10 UTC
Views: 2
Community Reviews
0 reviewsCrowdsource mitigation strategies, share intel context, and vote on the most helpful responses. Sign in to add your voice and help keep defenders ahead.
Want to contribute mitigation steps or threat intel context? Sign in or create an account to join the community discussion.
Actions
Updates to AI analysis require Pro Console access. Upgrade inside Console → Billing.
Need more coverage?
Upgrade to Pro Console for AI refresh and higher limits.
For incident response and remediation, OffSeq services can help resolve threats faster.
Latest Threats
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.