ZDI-26-775: GStreamer rtpL16depay Heap-based Buffer Overflow Remote Code Execution Vulnerability
ZDI disclosed a CVSS 9.8 heap overflow in GStreamer rtpL16depay that can allow remote code execution.
64
Organization
GStreamer
- Mentions · 7d0
- Mentions · 30d1
- All mentions2
- First seenSep 21, 2026
- Last mentioned15d ago
Timeline
2 articles · newest firstUSN-8798-1: GStreamer Good Plugins vulnerabilities
Ubuntu patches four GStreamer Good Plugins parsing flaws in MRF, PNG, and RTP handling that could allow remote code execution.
25
Related CVEs
by mentions- Heap buffer overflow RCE in GStreamer rtpL16depay
- CVE-2026-18296<1%7.8GStreamer MRF File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability
- CVE-2026-18295<1%7.8GStreamer MRF File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability
- CVE-2026-18298<1%7.8GStreamer PNG File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability
- CVE-2026-18299<1%7.8GStreamer rtpsbcdepay Use-After-Free Remote Code Execution Vulnerability
Appears with
- Canonicalorganization · 1
- GStreamerproduct · 1
- Ubuntuorganization · 1
- DongHyeon Hwangorganization · 1
Entities are extracted by the model from each article. First seen , last mentioned . Watching keeps it in this browser only (no account); the watchlist page and dashboard alerts use it.