Critical Vulnerability in gstreamer1-plugins-base: Arbitrary Code Execution and Pointer Dereference
Summary
RLSA-2026:69100: Important: gstreamer1-plugins-base security update. Affects gstreamer1-plugins-base versions < 0:1.22.12-8.el9_8.2. Fixed in 0:1.22.12-8.el9_8.2. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
GStreamer is a powerful streaming media framework that allows developers to create applications that handle multimedia content. The gstreamer1-plugins-base package includes a collection of essential plugins that facilitate various media processing tasks. However, recent security findings have revealed vulnerabilities within this package that could lead to severe security risks if exploited.
Vulnerability Detail
The vulnerabilities identified in gstreamer1-plugins-base include an arbitrary code execution risk due to a buffer overflow when parsing OGG files (CVE-2026-18297) and a NULL/invalid-pointer dereference in the function gst_rtsp_message_parse_auth_credentials() when handling crafted Digest Authorization/WWW-Authenticate headers (CVE-2026-85150). These vulnerabilities could allow attackers to execute arbitrary code or crash the application, leading to potential data breaches or service disruptions.
How To Fix
Minimum fixed version
0:1.22.12-8.el9_8.2
This is the first release that contains the fix.
sudo dnf update gstreamer1-plugins-baseTip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
As a temporary measure, you can avoid processing untrusted OGG files and ensure that any Digest Authorization headers are properly validated before parsing. This can help reduce the risk of exploitation until the package is updated.
Conclusion
The vulnerabilities in gstreamer1-plugins-base pose significant risks to applications utilizing this package. It is crucial to update to the latest patched version to safeguard against potential exploits. Utilizing tools like Vulert can further enhance your security posture by monitoring for vulnerabilities in real-time.
See every vulnerability recorded for gstreamer1-plugins-base →
FAQ
The CVSS score of the vulnerabilities in gstreamer1-plugins-base is 7.8, indicating a high severity level.
You can use Vulert, a tool that monitors open-source vulnerabilities in your software. By simply uploading your manifest file like package-lock.json, you can check for vulnerabilities in real-time.
Exploitation of these vulnerabilities could lead to arbitrary code execution, application crashes, and unauthorized access to sensitive data.
Yes, the vulnerabilities are fixed in version 0:1.22.12-8.el9_8.2 of gstreamer1-plugins-base.
If immediate updates are not possible, avoid processing untrusted media files and validate any authorization headers to minimize risk.
References
Related vulnerabilities
Recent vulnerabilities recorded for gstreamer1-plugins-base.
