Ubuntu fixes GStreamer plugin flaws that can crash or run code
Network-stream and Matroska issues are limited to Ubuntu 16.04, 18.04, and 20.04 LTS; the notice is cut off.
Stories per day · 30 days
Relatedcve-2026-1111831denial-of-service1file-inclusion1heap-overflow1media-plugins1openoffice1rce1rtpl16depay1ubuntu1zdi1
9 stories, newest first · one card per story
Stories tagged #gstreamer
Apache OpenOffice local file inclusion via GStreamer plugin
Apache OpenOffice through 4.1.16 allows crafted documents to load any local file contents through GStreamer multimedia component when saved or exported.
ZDI-26-775: GStreamer rtpL16depay Heap-based Buffer Overflow Remote Code Execution Vulnerability
ZDI disclosed a CVSS 9.8 heap overflow in GStreamer rtpL16depay that can allow remote code execution.
USN-8896-1: GStreamer Ugly Plugins vulnerabilities
Ubuntu patches GStreamer Ugly Plugins flaws that could run code from crafted RealMedia or ASF files.
USN-8863-1: GStreamer Good Plugins vulnerabilities
Ubuntu patched GStreamer Good Plugins flaws that could leak data or crash via crafted media.
USN-8855-1: GStreamer Bad Plugins vulnerability
USN-8855-1 warns that GStreamer Bad Plugins can crash or run code via a crafted WAV file.
USN-8798-1: GStreamer Good Plugins vulnerabilities
Ubuntu patches four GStreamer Good Plugins parsing flaws in MRF, PNG, and RTP handling that could allow remote code execution.
USN-8797-1: GStreamer Base Plugins vulnerability
Ubuntu warned that crafted OGG files could let attackers execute code via GStreamer Base Plugins.
USN-8778-1: GStreamer Good Plugins vulnerability
Ubuntu issued USN-8778-1 fixing a GStreamer Good Plugins flaw that lets remote attackers cause resource exhaustion and denial of service via fragmented RTP packets.