Out-of-bounds read in gst-plugins-bad and gstreamer - CVE-2026-52719

Vulnerability identifier: #VU141098

CSH Severity: Medium

CVSS v4: 4.6 [CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:A/VC:L/VI:N/VA:L/SC:N/SI:N/SA:N]

CVE-ID: CVE-2026-52719

CWE-ID: CWE-125

Exploitation vector: Remote access

Exploit availability: No public exploit available

The vulnerability allows a remote attacker to disclose sensitive information or cause a denial of service.

The vulnerability exists due to out-of-bounds read in the VA JPEG decoder segment parser when parsing crafted JPEG data. A remote attacker can provide a crafted JPEG file with undersized or truncated segments to disclose sensitive information or cause a denial of service.

User interaction is required to open or process a crafted JPEG file.

gst-plugins-bad
gstreamer
Debian Linux
SUSE Linux Enterprise Server 15 SP6
SUSE Linux Enterprise Server 15 SP5
SUSE Linux Enterprise Server for SAP Applications 15
SUSE Linux Enterprise Server 15
SUSE Linux Enterprise High Performance Computing LTSS 15
SUSE Linux Enterprise High Performance Computing 15
SUSE Linux Enterprise High Performance Computing ESPOS 15
SUSE Linux Enterprise Real Time 15
SUSE Linux Enterprise Desktop 15
Anolis OS
Red Hat Enterprise Linux for x86_64
Red Hat CodeReady Linux Builder for ARM 64 - Extended Update Support
Red Hat Enterprise Linux for IBM z Systems
Red Hat Enterprise Linux for Power, little endian
Red Hat Enterprise Linux for ARM 64
Red Hat Enterprise Linux for x86_64 - Extended Update Support
Red Hat Enterprise Linux for IBM z Systems - Extended Update Support
Red Hat Enterprise Linux for Power, little endian - Extended Update Support
Red Hat Enterprise Linux for ARM 64 - Extended Update Support
Red Hat CodeReady Linux Builder for x86_64 - Extended Update Support
Red Hat CodeReady Linux Builder for Power, little endian - Extended Update Support
Red Hat CodeReady Linux Builder for IBM z Systems - Extended Update Support
Desktop Applications Module
Basesystem Module
SUSE Package Hub 15
openSUSE Leap
libgstcuda-1_0-0-64bit-debuginfo
libgstvulkan-1_0-0-64bit
libgstplayer-1_0-0-64bit-debuginfo
libgstadaptivedemux-1_0-0-64bit-debuginfo
libgstwebrtc-1_0-0-64bit
libgstbasecamerabinsrc-1_0-0-64bit
libgstcodecs-1_0-0-64bit
libgstwebrtcnice-1_0-0-64bit-debuginfo
libgstcodecs-1_0-0-64bit-debuginfo
libgstmpegts-1_0-0-64bit
libgstvulkan-1_0-0-64bit-debuginfo
libgstphotography-1_0-0-64bit-debuginfo
libgsturidownloader-1_0-0-64bit-debuginfo
libgstsctp-1_0-0-64bit
libgstwayland-1_0-0-32bit-debuginfo
libgstinsertbin-1_0-0-32bit-debuginfo
libgstsctp-1_0-0-32bit
libgstvulkan-1_0-0-32bit-debuginfo
libgstva-1_0-0-32bit
libgstcodecparsers-1_0-0-64bit
libgstplay-1_0-0-64bit-debuginfo
libgstplayer-1_0-0-64bit
gstreamer-plugins-bad-chromaprint-64bit
libgstadaptivedemux-1_0-0-64bit
libgstmpegts-1_0-0-64bit-debuginfo
gstreamer-plugins-bad-chromaprint-64bit-debuginfo
libgstisoff-1_0-0-64bit
libgstsctp-1_0-0-64bit-debuginfo
libgstva-1_0-0-64bit-debuginfo
libgstcodecs-1_0-0-32bit-debuginfo
libgstwayland-1_0-0-64bit
libgstisoff-1_0-0-64bit-debuginfo
libgstbadaudio-1_0-0-64bit-debuginfo
libgstwayland-1_0-0-64bit-debuginfo
libgstwebrtcnice-1_0-0-64bit
libgstplay-1_0-0-64bit
libgstinsertbin-1_0-0-64bit
libgstcodecparsers-1_0-0-64bit-debuginfo
libgstsctp-1_0-0-32bit-debuginfo
libgstphotography-1_0-0-32bit-debuginfo
libgstwebrtcnice-1_0-0-32bit
gstreamer-plugins-bad-32bit
libgstphotography-1_0-0-32bit
libgsturidownloader-1_0-0-32bit
libgstplayer-1_0-0-32bit-debuginfo
libgstwebrtc-1_0-0-32bit-debuginfo
libgstadaptivedemux-1_0-0-32bit-debuginfo
gstreamer-plugins-bad-chromaprint-32bit
libgstcuda-1_0-0-32bit
libgstbadaudio-1_0-0-32bit-debuginfo
libgsturidownloader-1_0-0-32bit-debuginfo
libgstadaptivedemux-1_0-0-32bit
libgstmpegts-1_0-0-32bit
gstreamer-plugins-bad-32bit-debuginfo
libgstwayland-1_0-0-32bit
libgstbadaudio-1_0-0-32bit
libgstwebrtc-1_0-0-32bit
libgstinsertbin-1_0-0-32bit
libgstcuda-1_0-0-32bit-debuginfo
libgstva-1_0-0-32bit-debuginfo
libgstcodecparsers-1_0-0-32bit
libgstcodecs-1_0-0-32bit
libgstvulkan-1_0-0-32bit
libgstmpegts-1_0-0-32bit-debuginfo
libgstcodecparsers-1_0-0-32bit-debuginfo
libgstplay-1_0-0-32bit
libgstphotography-1_0-0-64bit
libgstbasecamerabinsrc-1_0-0-32bit
libgstwebrtcnice-1_0-0-32bit-debuginfo
libgstisoff-1_0-0-32bit
gstreamer-plugins-bad-chromaprint-32bit-debuginfo
libgstplayer-1_0-0-32bit
libgstbasecamerabinsrc-1_0-0-32bit-debuginfo
libgstisoff-1_0-0-32bit-debuginfo
libgstplay-1_0-0-32bit-debuginfo
gstreamer-plugins-bad-debugsource
libgstsctp-1_0-0
typelib-1_0-GstCodecs-1_0
libgstcuda-1_0-0
libgstplay-1_0-0-debuginfo
libgstwayland-1_0-0
libgstcodecparsers-1_0-0
libgstbasecamerabinsrc-1_0-0-debuginfo
libgstwayland-1_0-0-debuginfo
libgstplayer-1_0-0
gstreamer-transcoder
libgsttranscoder-1_0-0-debuginfo
libgstcodecs-1_0-0-debuginfo
libgstisoff-1_0-0
libgstbadaudio-1_0-0-debuginfo
libgstisoff-1_0-0-debuginfo
libgstbasecamerabinsrc-1_0-0
libgstcodecparsers-1_0-0-debuginfo
libgstinsertbin-1_0-0
libgstwebrtc-1_0-0-debuginfo
gstreamer-plugins-bad-lang
gstreamer-plugins-bad-chromaprint-debuginfo
typelib-1_0-GstPlayer-1_0
typelib-1_0-GstMpegts-1_0
libgsttranscoder-1_0-0
libgstva-1_0-0
gstreamer-plugins-bad-chromaprint
libgsturidownloader-1_0-0-debuginfo
libgstva-1_0-0-64bit
libgstwebrtcnice-1_0-0
typelib-1_0-GstCuda-1_0
typelib-1_0-CudaGst-1_0
typelib-1_0-GstInsertBin-1_0
typelib-1_0-GstVa-1_0
gstreamer-transcoder-devel
libgstadaptivedemux-1_0-0
libgstmpegts-1_0-0-debuginfo
libgstsctp-1_0-0-debuginfo
libgstmpegts-1_0-0
libgsturidownloader-1_0-0
gstreamer-transcoder-debuginfo
libgstplayer-1_0-0-debuginfo
libgstphotography-1_0-0-debuginfo
typelib-1_0-GstPlay-1_0
gstreamer-plugins-bad-devel
typelib-1_0-GstVulkanWayland-1_0
libgstphotography-1_0-0
libgstbadaudio-1_0-0-64bit
libgstcuda-1_0-0-64bit
libgstbasecamerabinsrc-1_0-0-64bit-debuginfo
gstreamer-plugins-bad-64bit-debuginfo
libgsturidownloader-1_0-0-64bit
gstreamer-plugins-bad-64bit
libgstinsertbin-1_0-0-64bit-debuginfo
libgstwebrtc-1_0-0-64bit-debuginfo
libgstcuda-1_0-0-debuginfo
libgstwebrtcnice-1_0-0-debuginfo
typelib-1_0-GstVulkan-1_0
typelib-1_0-GstBadAudio-1_0
typelib-1_0-GstVulkanXCB-1_0
libgstwebrtc-1_0-0
libgstva-1_0-0-debuginfo
gstreamer-plugins-bad-debuginfo
libgstinsertbin-1_0-0-debuginfo
typelib-1_0-GstTranscoder-1_0
typelib-1_0-GstWebRTC-1_0
libgstvulkan-1_0-0-debuginfo
gstreamer-plugins-bad
libgstcodecs-1_0-0
libgstbadaudio-1_0-0
libgstvulkan-1_0-0
libgstadaptivedemux-1_0-0-debuginfo
libgstplay-1_0-0
gstreamer1-plugins-bad-free-libs
gstreamer1-plugins-bad-free
gstreamer1-plugins-bad-free-devel
libgstanalytics-1_0-0-64bit-debuginfo
libgstdxva-1_0-0-64bit-debuginfo
libgstdxva-1_0-0-64bit
libgsttranscoder-1_0-0-64bit-debuginfo
libgstdxva-1_0-0-32bit-debuginfo
libgstanalytics-1_0-0-32bit
libgstanalytics-1_0-0-64bit
libgstmse-1_0-0-64bit
libgstmse-1_0-0-32bit
libgsttranscoder-1_0-0-32bit
libgsttranscoder-1_0-0-32bit-debuginfo
libgstanalytics-1_0-0-32bit-debuginfo
libgstmse-1_0-0-32bit-debuginfo
libgstdxva-1_0-0-32bit
libgstdxva-1_0-0-debuginfo
libgstmse-1_0-0-debuginfo
libgstmse-1_0-0
libgstanalytics-1_0-0
typelib-1_0-GstMse-1_0
libgstanalytics-1_0-0-debuginfo
libgstmse-1_0-0-64bit-debuginfo
typelib-1_0-GstAnalytics-1_0
libgsttranscoder-1_0-0-64bit
typelib-1_0-GstDxva-1_0
libgstdxva-1_0-0
gstreamer1-plugins-bad-free (Red Hat package)
gst-plugins-bad1.0 (Debian package)
gstreamer1-plugins-bad-free-doc

Install security update from vendor's website.

gst-plugins-bad - update to 1.28.4
gstreamer - update to 1.28.4
libgstcuda-1_0-0-64bit-debuginfo - addressed in versions 1.22.0-150500.3.31.1, 1.24.0-150600.4.6.1
libgstvulkan-1_0-0-64bit - addressed in versions 1.22.0-150500.3.31.1, 1.24.0-150600.4.6.1
libgstplayer-1_0-0-64bit-debuginfo - addressed in versions 1.22.0-150500.3.31.1, 1.24.0-150600.4.6.1
libgstadaptivedemux-1_0-0-64bit-debuginfo - addressed in versions 1.22.0-150500.3.31.1, 1.24.0-150600.4.6.1
libgstwebrtc-1_0-0-64bit - addressed in versions 1.22.0-150500.3.31.1, 1.24.0-150600.4.6.1
libgstbasecamerabinsrc-1_0-0-64bit - addressed in versions 1.22.0-150500.3.31.1, 1.24.0-150600.4.6.1
libgstcodecs-1_0-0-64bit - addressed in versions 1.22.0-150500.3.31.1, 1.24.0-150600.4.6.1
libgstwebrtcnice-1_0-0-64bit-debuginfo - addressed in versions 1.22.0-150500.3.31.1, 1.24.0-150600.4.6.1
libgstcodecs-1_0-0-64bit-debuginfo - addressed in versions 1.22.0-150500.3.31.1, 1.24.0-150600.4.6.1
libgstmpegts-1_0-0-64bit - addressed in versions 1.22.0-150500.3.31.1, 1.24.0-150600.4.6.1
libgstvulkan-1_0-0-64bit-debuginfo - addressed in versions 1.22.0-150500.3.31.1, 1.24.0-150600.4.6.1
libgstphotography-1_0-0-64bit-debuginfo - addressed in versions 1.22.0-150500.3.31.1, 1.24.0-150600.4.6.1
libgsturidownloader-1_0-0-64bit-debuginfo - addressed in versions 1.22.0-150500.3.31.1, 1.24.0-150600.4.6.1
libgstsctp-1_0-0-64bit - addressed in versions 1.22.0-150500.3.31.1, 1.24.0-150600.4.6.1
libgstwayland-1_0-0-32bit-debuginfo - addressed in versions 1.22.0-150500.3.31.1, 1.24.0-150600.4.6.1
libgstinsertbin-1_0-0-32bit-debuginfo - addressed in versions 1.22.0-150500.3.31.1, 1.24.0-150600.4.6.1
libgstsctp-1_0-0-32bit - addressed in versions 1.22.0-150500.3.31.1, 1.24.0-150600.4.6.1
libgstvulkan-1_0-0-32bit-debuginfo - addressed in versions 1.22.0-150500.3.31.1, 1.24.0-150600.4.6.1
libgstva-1_0-0-32bit - addressed in versions 1.22.0-150500.3.31.1, 1.24.0-150600.4.6.1
libgstcodecparsers-1_0-0-64bit - addressed in versions 1.22.0-150500.3.31.1, 1.24.0-150600.4.6.1
libgstplay-1_0-0-64bit-debuginfo - addressed in versions 1.22.0-150500.3.31.1, 1.24.0-150600.4.6.1
libgstplayer-1_0-0-64bit - addressed in versions 1.22.0-150500.3.31.1, 1.24.0-150600.4.6.1
gstreamer-plugins-bad-chromaprint-64bit - addressed in versions 1.22.0-150500.3.31.1, 1.24.0-150600.4.6.1
libgstadaptivedemux-1_0-0-64bit - addressed in versions 1.22.0-150500.3.31.1, 1.24.0-150600.4.6.1
libgstmpegts-1_0-0-64bit-debuginfo - addressed in versions 1.22.0-150500.3.31.1, 1.24.0-150600.4.6.1
gstreamer-plugins-bad-chromaprint-64bit-debuginfo - addressed in versions 1.22.0-150500.3.31.1, 1.24.0-150600.4.6.1
libgstisoff-1_0-0-64bit - addressed in versions 1.22.0-150500.3.31.1, 1.24.0-150600.4.6.1
libgstsctp-1_0-0-64bit-debuginfo - addressed in versions 1.22.0-150500.3.31.1, 1.24.0-150600.4.6.1
libgstva-1_0-0-64bit-debuginfo - addressed in versions 1.22.0-150500.3.31.1, 1.24.0-150600.4.6.1
libgstcodecs-1_0-0-32bit-debuginfo - addressed in versions 1.22.0-150500.3.31.1, 1.24.0-150600.4.6.1
libgstwayland-1_0-0-64bit - addressed in versions 1.22.0-150500.3.31.1, 1.24.0-150600.4.6.1
libgstisoff-1_0-0-64bit-debuginfo - addressed in versions 1.22.0-150500.3.31.1, 1.24.0-150600.4.6.1
libgstbadaudio-1_0-0-64bit-debuginfo - addressed in versions 1.22.0-150500.3.31.1, 1.24.0-150600.4.6.1
libgstwayland-1_0-0-64bit-debuginfo - addressed in versions 1.22.0-150500.3.31.1, 1.24.0-150600.4.6.1
libgstwebrtcnice-1_0-0-64bit - addressed in versions 1.22.0-150500.3.31.1, 1.24.0-150600.4.6.1
libgstplay-1_0-0-64bit - addressed in versions 1.22.0-150500.3.31.1, 1.24.0-150600.4.6.1
libgstinsertbin-1_0-0-64bit - addressed in versions 1.22.0-150500.3.31.1, 1.24.0-150600.4.6.1
libgstcodecparsers-1_0-0-64bit-debuginfo - addressed in versions 1.22.0-150500.3.31.1, 1.24.0-150600.4.6.1
libgstsctp-1_0-0-32bit-debuginfo - addressed in versions 1.22.0-150500.3.31.1, 1.24.0-150600.4.6.1
libgstphotography-1_0-0-32bit-debuginfo - addressed in versions 1.22.0-150500.3.31.1, 1.24.0-150600.4.6.1
libgstwebrtcnice-1_0-0-32bit - addressed in versions 1.22.0-150500.3.31.1, 1.24.0-150600.4.6.1
gstreamer-plugins-bad-32bit - addressed in versions 1.22.0-150500.3.31.1, 1.24.0-150600.4.6.1
libgstphotography-1_0-0-32bit - addressed in versions 1.22.0-150500.3.31.1, 1.24.0-150600.4.6.1
libgsturidownloader-1_0-0-32bit - addressed in versions 1.22.0-150500.3.31.1, 1.24.0-150600.4.6.1
libgstplayer-1_0-0-32bit-debuginfo - addressed in versions 1.22.0-150500.3.31.1, 1.24.0-150600.4.6.1
libgstwebrtc-1_0-0-32bit-debuginfo - addressed in versions 1.22.0-150500.3.31.1, 1.24.0-150600.4.6.1
libgstadaptivedemux-1_0-0-32bit-debuginfo - addressed in versions 1.22.0-150500.3.31.1, 1.24.0-150600.4.6.1
gstreamer-plugins-bad-chromaprint-32bit - addressed in versions 1.22.0-150500.3.31.1, 1.24.0-150600.4.6.1
libgstcuda-1_0-0-32bit - addressed in versions 1.22.0-150500.3.31.1, 1.24.0-150600.4.6.1
libgstbadaudio-1_0-0-32bit-debuginfo - addressed in versions 1.22.0-150500.3.31.1, 1.24.0-150600.4.6.1
libgsturidownloader-1_0-0-32bit-debuginfo - addressed in versions 1.22.0-150500.3.31.1, 1.24.0-150600.4.6.1
libgstadaptivedemux-1_0-0-32bit - addressed in versions 1.22.0-150500.3.31.1, 1.24.0-150600.4.6.1
libgstmpegts-1_0-0-32bit - addressed in versions 1.22.0-150500.3.31.1, 1.24.0-150600.4.6.1
gstreamer-plugins-bad-32bit-debuginfo - addressed in versions 1.22.0-150500.3.31.1, 1.24.0-150600.4.6.1
libgstwayland-1_0-0-32bit - addressed in versions 1.22.0-150500.3.31.1, 1.24.0-150600.4.6.1
libgstbadaudio-1_0-0-32bit - addressed in versions 1.22.0-150500.3.31.1, 1.24.0-150600.4.6.1
libgstwebrtc-1_0-0-32bit - addressed in versions 1.22.0-150500.3.31.1, 1.24.0-150600.4.6.1
libgstinsertbin-1_0-0-32bit - addressed in versions 1.22.0-150500.3.31.1, 1.24.0-150600.4.6.1
libgstcuda-1_0-0-32bit-debuginfo - addressed in versions 1.22.0-150500.3.31.1, 1.24.0-150600.4.6.1
libgstva-1_0-0-32bit-debuginfo - addressed in versions 1.22.0-150500.3.31.1, 1.24.0-150600.4.6.1
libgstcodecparsers-1_0-0-32bit - addressed in versions 1.22.0-150500.3.31.1, 1.24.0-150600.4.6.1
libgstcodecs-1_0-0-32bit - addressed in versions 1.22.0-150500.3.31.1, 1.24.0-150600.4.6.1
libgstvulkan-1_0-0-32bit - addressed in versions 1.22.0-150500.3.31.1, 1.24.0-150600.4.6.1
libgstmpegts-1_0-0-32bit-debuginfo - addressed in versions 1.22.0-150500.3.31.1, 1.24.0-150600.4.6.1
libgstcodecparsers-1_0-0-32bit-debuginfo - addressed in versions 1.22.0-150500.3.31.1, 1.24.0-150600.4.6.1
libgstplay-1_0-0-32bit - addressed in versions 1.22.0-150500.3.31.1, 1.24.0-150600.4.6.1
libgstphotography-1_0-0-64bit - addressed in versions 1.22.0-150500.3.31.1, 1.24.0-150600.4.6.1
libgstbasecamerabinsrc-1_0-0-32bit - addressed in versions 1.22.0-150500.3.31.1, 1.24.0-150600.4.6.1
libgstwebrtcnice-1_0-0-32bit-debuginfo - addressed in versions 1.22.0-150500.3.31.1, 1.24.0-150600.4.6.1
libgstisoff-1_0-0-32bit - addressed in versions 1.22.0-150500.3.31.1, 1.24.0-150600.4.6.1
gstreamer-plugins-bad-chromaprint-32bit-debuginfo - addressed in versions 1.22.0-150500.3.31.1, 1.24.0-150600.4.6.1
libgstplayer-1_0-0-32bit - addressed in versions 1.22.0-150500.3.31.1, 1.24.0-150600.4.6.1
libgstbasecamerabinsrc-1_0-0-32bit-debuginfo - addressed in versions 1.22.0-150500.3.31.1, 1.24.0-150600.4.6.1
libgstisoff-1_0-0-32bit-debuginfo - addressed in versions 1.22.0-150500.3.31.1, 1.24.0-150600.4.6.1
libgstplay-1_0-0-32bit-debuginfo - addressed in versions 1.22.0-150500.3.31.1, 1.24.0-150600.4.6.1
gstreamer-plugins-bad-debugsource - addressed in versions 1.22.0-150500.3.31.1, 1.24.0-150600.4.6.1
libgstsctp-1_0-0 - addressed in versions 1.22.0-150500.3.31.1, 1.24.0-150600.4.6.1
typelib-1_0-GstCodecs-1_0 - addressed in versions 1.22.0-150500.3.31.1, 1.24.0-150600.4.6.1
libgstcuda-1_0-0 - addressed in versions 1.22.0-150500.3.31.1, 1.24.0-150600.4.6.1
libgstplay-1_0-0-debuginfo - addressed in versions 1.22.0-150500.3.31.1, 1.24.0-150600.4.6.1
libgstwayland-1_0-0 - addressed in versions 1.22.0-150500.3.31.1, 1.24.0-150600.4.6.1
libgstcodecparsers-1_0-0 - addressed in versions 1.22.0-150500.3.31.1, 1.24.0-150600.4.6.1
libgstbasecamerabinsrc-1_0-0-debuginfo - addressed in versions 1.22.0-150500.3.31.1, 1.24.0-150600.4.6.1
libgstwayland-1_0-0-debuginfo - addressed in versions 1.22.0-150500.3.31.1, 1.24.0-150600.4.6.1
libgstplayer-1_0-0 - addressed in versions 1.22.0-150500.3.31.1, 1.24.0-150600.4.6.1
gstreamer-transcoder - addressed in versions 1.22.0-150500.3.31.1, 1.24.0-150600.4.6.1
libgsttranscoder-1_0-0-debuginfo - addressed in versions 1.22.0-150500.3.31.1, 1.24.0-150600.4.6.1
libgstcodecs-1_0-0-debuginfo - addressed in versions 1.22.0-150500.3.31.1, 1.24.0-150600.4.6.1
libgstisoff-1_0-0 - addressed in versions 1.22.0-150500.3.31.1, 1.24.0-150600.4.6.1
libgstbadaudio-1_0-0-debuginfo - addressed in versions 1.22.0-150500.3.31.1, 1.24.0-150600.4.6.1
libgstisoff-1_0-0-debuginfo - addressed in versions 1.22.0-150500.3.31.1, 1.24.0-150600.4.6.1
libgstbasecamerabinsrc-1_0-0 - addressed in versions 1.22.0-150500.3.31.1, 1.24.0-150600.4.6.1
libgstcodecparsers-1_0-0-debuginfo - addressed in versions 1.22.0-150500.3.31.1, 1.24.0-150600.4.6.1
libgstinsertbin-1_0-0 - addressed in versions 1.22.0-150500.3.31.1, 1.24.0-150600.4.6.1
libgstwebrtc-1_0-0-debuginfo - addressed in versions 1.22.0-150500.3.31.1, 1.24.0-150600.4.6.1
gstreamer-plugins-bad-lang - addressed in versions 1.22.0-150500.3.31.1, 1.24.0-150600.4.6.1
gstreamer-plugins-bad-chromaprint-debuginfo - addressed in versions 1.22.0-150500.3.31.1, 1.24.0-150600.4.6.1
typelib-1_0-GstPlayer-1_0 - addressed in versions 1.22.0-150500.3.31.1, 1.24.0-150600.4.6.1
typelib-1_0-GstMpegts-1_0 - addressed in versions 1.22.0-150500.3.31.1, 1.24.0-150600.4.6.1
libgsttranscoder-1_0-0 - addressed in versions 1.22.0-150500.3.31.1, 1.24.0-150600.4.6.1
libgstva-1_0-0 - addressed in versions 1.22.0-150500.3.31.1, 1.24.0-150600.4.6.1
gstreamer-plugins-bad-chromaprint - addressed in versions 1.22.0-150500.3.31.1, 1.24.0-150600.4.6.1
libgsturidownloader-1_0-0-debuginfo - addressed in versions 1.22.0-150500.3.31.1, 1.24.0-150600.4.6.1
libgstva-1_0-0-64bit - addressed in versions 1.22.0-150500.3.31.1, 1.24.0-150600.4.6.1
libgstwebrtcnice-1_0-0 - addressed in versions 1.22.0-150500.3.31.1, 1.24.0-150600.4.6.1
typelib-1_0-GstCuda-1_0 - addressed in versions 1.22.0-150500.3.31.1, 1.24.0-150600.4.6.1
typelib-1_0-CudaGst-1_0 - addressed in versions 1.22.0-150500.3.31.1, 1.24.0-150600.4.6.1
typelib-1_0-GstInsertBin-1_0 - addressed in versions 1.22.0-150500.3.31.1, 1.24.0-150600.4.6.1
typelib-1_0-GstVa-1_0 - addressed in versions 1.22.0-150500.3.31.1, 1.24.0-150600.4.6.1
gstreamer-transcoder-devel - addressed in versions 1.22.0-150500.3.31.1, 1.24.0-150600.4.6.1
libgstadaptivedemux-1_0-0 - addressed in versions 1.22.0-150500.3.31.1, 1.24.0-150600.4.6.1
libgstmpegts-1_0-0-debuginfo - addressed in versions 1.22.0-150500.3.31.1, 1.24.0-150600.4.6.1
libgstsctp-1_0-0-debuginfo - addressed in versions 1.22.0-150500.3.31.1, 1.24.0-150600.4.6.1
libgstmpegts-1_0-0 - addressed in versions 1.22.0-150500.3.31.1, 1.24.0-150600.4.6.1
libgsturidownloader-1_0-0 - addressed in versions 1.22.0-150500.3.31.1, 1.24.0-150600.4.6.1
gstreamer-transcoder-debuginfo - addressed in versions 1.22.0-150500.3.31.1, 1.24.0-150600.4.6.1
libgstplayer-1_0-0-debuginfo - addressed in versions 1.22.0-150500.3.31.1, 1.24.0-150600.4.6.1
libgstphotography-1_0-0-debuginfo - addressed in versions 1.22.0-150500.3.31.1, 1.24.0-150600.4.6.1
typelib-1_0-GstPlay-1_0 - addressed in versions 1.22.0-150500.3.31.1, 1.24.0-150600.4.6.1
gstreamer-plugins-bad-devel - addressed in versions 1.22.0-150500.3.31.1, 1.24.0-150600.4.6.1
typelib-1_0-GstVulkanWayland-1_0 - addressed in versions 1.22.0-150500.3.31.1, 1.24.0-150600.4.6.1
libgstphotography-1_0-0 - addressed in versions 1.22.0-150500.3.31.1, 1.24.0-150600.4.6.1
libgstbadaudio-1_0-0-64bit - addressed in versions 1.22.0-150500.3.31.1, 1.24.0-150600.4.6.1
libgstcuda-1_0-0-64bit - addressed in versions 1.22.0-150500.3.31.1, 1.24.0-150600.4.6.1
libgstbasecamerabinsrc-1_0-0-64bit-debuginfo - addressed in versions 1.22.0-150500.3.31.1, 1.24.0-150600.4.6.1
gstreamer-plugins-bad-64bit-debuginfo - addressed in versions 1.22.0-150500.3.31.1, 1.24.0-150600.4.6.1
libgsturidownloader-1_0-0-64bit - addressed in versions 1.22.0-150500.3.31.1, 1.24.0-150600.4.6.1
gstreamer-plugins-bad-64bit - addressed in versions 1.22.0-150500.3.31.1, 1.24.0-150600.4.6.1
libgstinsertbin-1_0-0-64bit-debuginfo - addressed in versions 1.22.0-150500.3.31.1, 1.24.0-150600.4.6.1
libgstwebrtc-1_0-0-64bit-debuginfo - addressed in versions 1.22.0-150500.3.31.1, 1.24.0-150600.4.6.1
libgstcuda-1_0-0-debuginfo - addressed in versions 1.22.0-150500.3.31.1, 1.24.0-150600.4.6.1
libgstwebrtcnice-1_0-0-debuginfo - addressed in versions 1.22.0-150500.3.31.1, 1.24.0-150600.4.6.1
typelib-1_0-GstVulkan-1_0 - addressed in versions 1.22.0-150500.3.31.1, 1.24.0-150600.4.6.1
typelib-1_0-GstBadAudio-1_0 - addressed in versions 1.22.0-150500.3.31.1, 1.24.0-150600.4.6.1
typelib-1_0-GstVulkanXCB-1_0 - addressed in versions 1.22.0-150500.3.31.1, 1.24.0-150600.4.6.1
libgstwebrtc-1_0-0 - addressed in versions 1.22.0-150500.3.31.1, 1.24.0-150600.4.6.1
libgstva-1_0-0-debuginfo - addressed in versions 1.22.0-150500.3.31.1, 1.24.0-150600.4.6.1
gstreamer-plugins-bad-debuginfo - addressed in versions 1.22.0-150500.3.31.1, 1.24.0-150600.4.6.1
libgstinsertbin-1_0-0-debuginfo - addressed in versions 1.22.0-150500.3.31.1, 1.24.0-150600.4.6.1
typelib-1_0-GstTranscoder-1_0 - addressed in versions 1.22.0-150500.3.31.1, 1.24.0-150600.4.6.1
typelib-1_0-GstWebRTC-1_0 - addressed in versions 1.22.0-150500.3.31.1, 1.24.0-150600.4.6.1
libgstvulkan-1_0-0-debuginfo - addressed in versions 1.22.0-150500.3.31.1, 1.24.0-150600.4.6.1
gstreamer-plugins-bad - addressed in versions 1.22.0-150500.3.31.1, 1.24.0-150600.4.6.1
libgstcodecs-1_0-0 - addressed in versions 1.22.0-150500.3.31.1, 1.24.0-150600.4.6.1
libgstbadaudio-1_0-0 - addressed in versions 1.22.0-150500.3.31.1, 1.24.0-150600.4.6.1
libgstvulkan-1_0-0 - addressed in versions 1.22.0-150500.3.31.1, 1.24.0-150600.4.6.1
libgstadaptivedemux-1_0-0-debuginfo - addressed in versions 1.22.0-150500.3.31.1, 1.24.0-150600.4.6.1
libgstplay-1_0-0 - addressed in versions 1.22.0-150500.3.31.1, 1.24.0-150600.4.6.1
gstreamer1-plugins-bad-free-libs - addressed in versions 1.22.12-7.0.1, 1.28.1-4
gstreamer1-plugins-bad-free - addressed in versions 1.22.12-7.0.1, 1.28.1-4
gstreamer1-plugins-bad-free-devel - addressed in versions 1.22.12-7.0.1, 1.28.1-4
libgstanalytics-1_0-0-64bit-debuginfo - update to 1.24.0-150600.4.6.1
libgstdxva-1_0-0-64bit-debuginfo - update to 1.24.0-150600.4.6.1
libgstdxva-1_0-0-64bit - update to 1.24.0-150600.4.6.1
libgsttranscoder-1_0-0-64bit-debuginfo - update to 1.24.0-150600.4.6.1
libgstdxva-1_0-0-32bit-debuginfo - update to 1.24.0-150600.4.6.1
libgstanalytics-1_0-0-32bit - update to 1.24.0-150600.4.6.1
libgstanalytics-1_0-0-64bit - update to 1.24.0-150600.4.6.1
libgstmse-1_0-0-64bit - update to 1.24.0-150600.4.6.1
libgstmse-1_0-0-32bit - update to 1.24.0-150600.4.6.1
libgsttranscoder-1_0-0-32bit - update to 1.24.0-150600.4.6.1
libgsttranscoder-1_0-0-32bit-debuginfo - update to 1.24.0-150600.4.6.1
libgstanalytics-1_0-0-32bit-debuginfo - update to 1.24.0-150600.4.6.1
libgstmse-1_0-0-32bit-debuginfo - update to 1.24.0-150600.4.6.1
libgstdxva-1_0-0-32bit - update to 1.24.0-150600.4.6.1
libgstdxva-1_0-0-debuginfo - update to 1.24.0-150600.4.6.1
libgstmse-1_0-0-debuginfo - update to 1.24.0-150600.4.6.1
libgstmse-1_0-0 - update to 1.24.0-150600.4.6.1
libgstanalytics-1_0-0 - update to 1.24.0-150600.4.6.1
typelib-1_0-GstMse-1_0 - update to 1.24.0-150600.4.6.1
libgstanalytics-1_0-0-debuginfo - update to 1.24.0-150600.4.6.1
libgstmse-1_0-0-64bit-debuginfo - update to 1.24.0-150600.4.6.1
typelib-1_0-GstAnalytics-1_0 - update to 1.24.0-150600.4.6.1
libgsttranscoder-1_0-0-64bit - update to 1.24.0-150600.4.6.1
typelib-1_0-GstDxva-1_0 - update to 1.24.0-150600.4.6.1
libgstdxva-1_0-0 - update to 1.24.0-150600.4.6.1
gstreamer1-plugins-bad-free (Red Hat package) - addressed in versions 1.24.11-3.el10_0.4, 1.26.7-2.el10_2.4
gst-plugins-bad1.0 (Debian package) - update to 1.26.2-3+deb13u2
gstreamer1-plugins-bad-free-doc - update to 1.28.1-4

• https://gstreamer.freedesktop.org/security/sa-2026-0040.html
• https://gitlab.freedesktop.org/gstreamer/gstreamer/-/merge_requests/11805.patch

• Multiple vulnerabilities in gst-plugins-bad
• Debian update for gst-plugins-bad1.0
• Red Hat Enterprise Linux 10 update for gstreamer1-plugins-bad-free
• Red Hat Enterprise Linux 10 update for gstreamer1-plugins-bad-free
• SUSE update for gstreamer-plugins-bad
• SUSE update for gstreamer-plugins-bad
• Anolis OS update for gstreamer1-plugins-bad-free
• Anolis OS update for gstreamer1-plugins-bad-free