GCVE-110-MAGEIA-2026-222

Advisory Published

Vulnetix · Advisory published June 18, 2026

CVE-2026-2921, GStreamer RIFF Palette Integer Overflow Remote Code Execution Vulnerability CVE-2026-2923.GStreamer DVB Subtitles Out-Of-Bounds Write Remote Code Execution Vulnerability CVE-2026-3082, GStreamer JPEG Parser Heap-based Buffer Overflow Remote Code Execution Vulnerability CVE-2026-3085, GStreamer rtpqdm2depay Heap-based Buffer Overflow Remote Code Execution Vulnerability CVE-2026-2920, GStreamer ASF Demuxer Heap-based Buffer Overflow Remote Code Execution Vulnerability CVE-2026-2922, GStreamer ASF Demuxer Heap-based Buffer Overflow Remote Code Execution Vulnerability CVE-2026-1940, Gstreamer: incomplete fix of CVE-2026-1940

Download JSON Open in Console

Affected Products

Vendor	Product	Versions	Platforms
Mageia	gstreamer1.0-plugins-bad	0 (affected), 1.22.11-1.2.mga9 (unaffected), 0 (affected), 1.22.11-1.2.mga9.tainted (unaffected)	—
Mageia	gstreamer1.0-plugins-good	0 (affected), 1.22.11-1.2.mga9 (unaffected)	—
Mageia	gstreamer1.0-plugins-ugly	0 (affected), 1.22.11-1.1.mga9 (unaffected), 0 (affected), 1.22.11-1.1.mga9.tainted (unaffected)	—
Mageia	gstreamer1.0-plugins-base	0 (affected), 1.22.11-1.3.mga9 (unaffected)	—

References

Updated gstreamer1.0-plugins-bad, gstreamer1.0-plugins-base, gstreamer1.0-plugins-good & gstreamer1.0-plugins-ugly packages fix security vulnerabilities

advisory

Updated gstreamer1.0-plugins-bad, gstreamer1.0-plugins-base, gstreamer1.0-plugins-good & gstreamer1.0-plugins-ugly packages fix security vulnerabilities

issue

Updated gstreamer1.0-plugins-bad, gstreamer1.0-plugins-base, gstreamer1.0-plugins-good & gstreamer1.0-plugins-ugly packages fix security vulnerabilities

url

Updated gstreamer1.0-plugins-bad, gstreamer1.0-plugins-base, gstreamer1.0-plugins-good & gstreamer1.0-plugins-ugly packages fix security vulnerabilities

url

Browse GCVE Records

73,877 records in the GCVE database · Updated July 20, 2026

No matching records found.

Explore Further

Investigate this vulnerability in the interactive console or download the raw GCVE record.

Open in Console Download JSON