FlawAtlas
Search the atlas
MGASA-2026-0222 Not scored

Updated gstreamer1.0-plugins-bad, gstreamer1.0-plugins-base, gstreamer1.0-plugins-good & gstreamer1.0-plugins-ugly packages fix security vulnerabilities

CVE-2026-2921, GStreamer RIFF Palette Integer Overflow Remote Code Execution Vulnerability CVE-2026-2923.GStreamer DVB Subtitles Out-Of-Bounds Write Remote Code Execution Vulnerability CVE-2026-3082, GStreamer JPEG Parser Heap-based Buffer Overflow Remote Code Execution Vulnerability CVE-2026-3085, GStreamer rtpqdm2depay Heap-based Buffer Overflow Remote Code Execution Vulnerability CVE-2026-2920, GStreamer ASF Demuxer Heap-based Buffer Overflow Remote Code Execution Vulnerability CVE-2026-2922, GStreamer ASF Demuxer Heap-based Buffer Overflow Remote Code Execution Vulnerability CVE-2026-1940, Gstreamer: incomplete fix of CVE-2026-1940

Exploit probability Not scored
Published June 18, 2026
Required by Not available
Last source change June 18, 2026

02 / AFFECTED SOFTWARE

Affected packages

Mageia:9 gstreamer1.0-plugins-bad
Mageia:9 gstreamer1.0-plugins-base
Mageia:9 gstreamer1.0-plugins-good
Mageia:9 gstreamer1.0-plugins-ugly

03 / CONNECTIONS

Connected vulnerabilities

04 / EVIDENCE

Source records

Open Source Vulnerabilities MGASA-2026-0222

CVE-2026-2921, GStreamer RIFF Palette Integer Overflow Remote Code Execution Vulnerability CVE-2026-2923.GStreamer DVB Subtitles Out-Of-Bounds Write Remote Code Execution Vulnerability CVE-2026-3082, GStreamer JPEG Parser Heap-based Buffer Overflow Remote Code Execution Vulnerability CVE-2026-3085, GStreamer rtpqdm2depay Heap-based Buffer Overflow Remote Code Execution Vulnerability CVE-2026-2920, GStreamer ASF Demuxer Heap-based Buffer Overflow Remote Code Execution Vulnerability CVE-2026-2922, GStreamer ASF Demuxer Heap-based Buffer Overflow Remote Code Execution Vulnerability CVE-2026-1940, Gstreamer: incomplete fix of CVE-2026-1940

View original source

05 / REFERENCES

Further evidence