The Red Hat security advisory RHSA-2026:8862 addresses seven distinct vulnerabilities in the GStreamer media framework plugins. These include CVE-2026-2920 and CVE-2026-2921 which allow arbitrary code execution via ASF file processing and RIFF palette integer overflow in AVI handling, respectively. CVE-2026-3082, CVE-2026-3083, and CVE-2026-3085 involve remote code execution through heap-based buffer overflows and out-of-bounds writes in JPEG parser and rtpqdm2depay components. Additional vulnerabilities CVE-2026-2922 and CVE-2026-2923 enable remote code execution via out-of-bounds writes in RealMedia Demuxer and DVB Subtitles handling. These vulnerabilities pose a high security risk and affect multiple Red Hat Enterprise Linux 9.6 Extended Update Support variants and related CodeReady Linux Builder products. Red Hat has released updated packages to remediate these issues.

Successful exploitation of these vulnerabilities could allow an attacker to execute arbitrary or remote code on affected systems by processing specially crafted media files. This could lead to full system compromise or unauthorized actions within the context of the affected software. The vulnerabilities affect critical media processing components, increasing the risk of exploitation in environments where untrusted media content is processed.

Red Hat has released updated packages for the affected GStreamer plugins as part of Red Hat Enterprise Linux 9.6 Extended Update Support and related products. Users should apply these official updates promptly to remediate the vulnerabilities. For detailed update instructions, refer to the Red Hat advisory at https://access.redhat.com/articles/11258. No alternative mitigations or workarounds are specified in the advisory.