By vendor

Gstreamer vulnerabilities

Known CVEs affecting Gstreamer products, prioritized by severity, with SEC.co remediation and detection guidance.

2 published vulnerabilities

• CVE-2026-12892MEDIUM 4.4

  GStreamer, a popular multimedia framework used in many Linux applications and media players, contains a parsing flaw in its H.264 video handling. When a specially crafted video file with malformed extension data is opened, the parser can read one byte of memory it shouldn't have access to, potentially crashing the application or exposing a small amount of sensitive heap data. The vulnerability requires user interaction—someone must deliberately open a malicious video file—which limits its attack surface.

• CVE-2026-12891MEDIUM 4.3

  A memory reading flaw exists in GStreamer's H.266 video codec handler. When a malicious video file with a specially crafted aspect ratio value is processed, the parser reads beyond its intended memory boundaries, potentially exposing small amounts of sensitive data from the application's memory. The risk is modest because exploitation requires user interaction (opening a video) and the leaked information is typically limited, but it can occur over a network.