Integer overflow in gst-plugins-bad and gstreamer - CVE-2026-52722

Vulnerability identifier: #VU141111

CSH Severity: Medium

CVSS v4: 6.8 [CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:A/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N]

CVE-ID: CVE-2026-52722

CWE-ID: CWE-190

Exploitation vector: Remote access

Exploit availability: No public exploit available

The vulnerability allows a remote attacker to cause a denial of service or disclose sensitive information.

The vulnerability exists due to integer overflow in vmncdec element when parsing crafted VMNC streams with cursor rectangle data. A remote attacker can send a specially crafted VMNC stream to cause a denial of service or disclose sensitive information.

The issue occurs during cursor payload size computation using signed integer arithmetic, which can produce a negative length value that bypasses a subsequent short-packet check.

gst-plugins-bad
gstreamer
SUSE Linux Enterprise Server 15 SP6
SUSE Linux Enterprise Server 15 SP4
SUSE Linux Enterprise Server 15 SP5
SUSE Linux Enterprise Server for SAP Applications 15
SUSE Linux Enterprise High Performance Computing 15
SUSE Linux Enterprise High Performance Computing ESPOS 15
SUSE Linux Enterprise High Performance Computing LTSS 15
SUSE Linux Enterprise Server 15
SUSE Linux Enterprise Desktop 15
SUSE Linux Enterprise Real Time 15
Red Hat CodeReady Linux Builder for IBM z Systems
Red Hat CodeReady Linux Builder for ARM 64
Red Hat CodeReady Linux Builder for Power, little endian
Red Hat CodeReady Linux Builder for x86_64
Red Hat Enterprise Linux for ARM 64
Anolis OS
Red Hat Enterprise Linux for Power, little endian
Red Hat Enterprise Linux for IBM z Systems
Red Hat Enterprise Linux for x86_64
Red Hat Enterprise Linux Server - AUS
Red Hat Enterprise Linux Server - TUS
Red Hat CodeReady Linux Builder for x86_64 - Extended Update Support
Red Hat Enterprise Linux for x86_64 - Extended Update Support
Red Hat Enterprise Linux for IBM z Systems - Extended Update Support
Red Hat Enterprise Linux for Power, little endian - Extended Update Support
Red Hat Enterprise Linux for ARM 64 - Extended Update Support
Red Hat CodeReady Linux Builder for Power, little endian - Extended Update Support
Red Hat CodeReady Linux Builder for IBM z Systems - Extended Update Support
Red Hat CodeReady Linux Builder for ARM 64 - Extended Update Support
Basesystem Module
Desktop Applications Module
SUSE Package Hub 15
openSUSE Leap
Red Hat Enterprise Linux Server for Power LE - Update Services for SAP Solutions
gstreamer1-plugins-bad-free (Red Hat package)
libgstbadaudio-1_0-0-debuginfo
libgstsctp-1_0-0-debuginfo
libgsturidownloader-1_0-0
typelib-1_0-GstPlay-1_0
libgstplayer-1_0-0-debuginfo
libgstbadaudio-1_0-0
libgstbasecamerabinsrc-1_0-0-debuginfo
typelib-1_0-GstVulkanXCB-1_0
libgstcodecparsers-1_0-0-debuginfo
libgstsctp-1_0-0
libgstwebrtc-1_0-0-debuginfo
typelib-1_0-GstVulkanWayland-1_0
typelib-1_0-GstVulkan-1_0
libgstphotography-1_0-0-debuginfo
libgstcodecparsers-1_0-0
typelib-1_0-GstWebRTC-1_0
libgstinsertbin-1_0-0-64bit
libgstva-1_0-0-64bit
gstreamer-transcoder-debuginfo
gstreamer-plugins-bad-chromaprint-64bit-debuginfo
libgstisoff-1_0-0-64bit
libgstcodecs-1_0-0-64bit-debuginfo
libgstsctp-1_0-0-64bit-debuginfo
libgstplayer-1_0-0-64bit-debuginfo
libgstplay-1_0-0-64bit-debuginfo
libgstisoff-1_0-0-64bit-debuginfo
gstreamer-plugins-bad-debugsource
libgstbadaudio-1_0-0-64bit-debuginfo
libgstcodecparsers-1_0-0-64bit
typelib-1_0-GstInsertBin-1_0
typelib-1_0-GstTranscoder-1_0
typelib-1_0-GstCodecs-1_0
libgstisoff-1_0-0-debuginfo
gstreamer-plugins-bad-devel
libgstcodecs-1_0-0
libgsturidownloader-1_0-0-debuginfo
typelib-1_0-GstMpegts-1_0
gstreamer-plugins-bad-chromaprint
libgstplay-1_0-0-debuginfo
libgstwebrtc-1_0-0
libgsttranscoder-1_0-0-debuginfo
libgstadaptivedemux-1_0-0-debuginfo
libgstvulkan-1_0-0-debuginfo
libgstmpegts-1_0-0-debuginfo
libgsttranscoder-1_0-0
libgstplayer-1_0-0
gstreamer-plugins-bad-debuginfo
libgstisoff-1_0-0
libgstadaptivedemux-1_0-0
libgstva-1_0-0
gstreamer-plugins-bad
libgstinsertbin-1_0-0-debuginfo
gstreamer-plugins-bad-chromaprint-debuginfo
libgstbasecamerabinsrc-1_0-0
typelib-1_0-GstPlayer-1_0
libgstcodecs-1_0-0-debuginfo
typelib-1_0-GstBadAudio-1_0
libgstwayland-1_0-0-debuginfo
libgstvulkan-1_0-0
gstreamer-transcoder
libgstinsertbin-1_0-0
libgstmpegts-1_0-0
gstreamer-transcoder-devel
libgstplay-1_0-0
libgstphotography-1_0-0
libgstva-1_0-0-debuginfo
libgstwayland-1_0-0
libgstsctp-1_0-0-32bit-debuginfo
gstreamer-plugins-bad-32bit
libgstadaptivedemux-1_0-0-32bit
libgstplayer-1_0-0-32bit
libgstisoff-1_0-0-32bit-debuginfo
gstreamer-plugins-bad-chromaprint-32bit
libgstadaptivedemux-1_0-0-64bit
libgstvulkan-1_0-0-32bit
libgstplayer-1_0-0-32bit-debuginfo
libgstwayland-1_0-0-32bit
libgstphotography-1_0-0-32bit
libgstmpegts-1_0-0-32bit-debuginfo
gstreamer-plugins-bad-32bit-debuginfo
libgstvulkan-1_0-0-32bit-debuginfo
libgstwebrtc-1_0-0-32bit
libgstwayland-1_0-0-32bit-debuginfo
libgstinsertbin-1_0-0-32bit
libgstadaptivedemux-1_0-0-32bit-debuginfo
gstreamer-plugins-bad-lang
libgstva-1_0-0-32bit
libgstbasecamerabinsrc-1_0-0-32bit
libgstcodecs-1_0-0-32bit
libgstplay-1_0-0-32bit
libgstphotography-1_0-0-32bit-debuginfo
gstreamer-plugins-bad-chromaprint-32bit-debuginfo
libgstva-1_0-0-32bit-debuginfo
libgstphotography-1_0-0-64bit-debuginfo
libgstwebrtc-1_0-0-32bit-debuginfo
libgstbadaudio-1_0-0-32bit
libgsturidownloader-1_0-0-32bit-debuginfo
libgstsctp-1_0-0-32bit
libgstcodecs-1_0-0-32bit-debuginfo
libgsturidownloader-1_0-0-32bit
libgstbadaudio-1_0-0-32bit-debuginfo
libgstmpegts-1_0-0-64bit-debuginfo
libgstcodecs-1_0-0-64bit
libgstadaptivedemux-1_0-0-64bit-debuginfo
libgstmpegts-1_0-0-64bit
libgstva-1_0-0-64bit-debuginfo
libgstbadaudio-1_0-0-64bit
libgstplay-1_0-0-64bit
libgsturidownloader-1_0-0-64bit
gstreamer-plugins-bad-64bit
libgstinsertbin-1_0-0-32bit-debuginfo
gstreamer-plugins-bad-chromaprint-64bit
libgstcodecparsers-1_0-0-64bit-debuginfo
libgstwebrtc-1_0-0-64bit-debuginfo
libgsturidownloader-1_0-0-64bit-debuginfo
gstreamer-plugins-bad-64bit-debuginfo
libgstvulkan-1_0-0-64bit
libgstcodecparsers-1_0-0-32bit-debuginfo
libgstwayland-1_0-0-64bit
libgstbasecamerabinsrc-1_0-0-64bit
libgstplay-1_0-0-32bit-debuginfo
libgstmpegts-1_0-0-32bit
libgstbasecamerabinsrc-1_0-0-32bit-debuginfo
libgstcodecparsers-1_0-0-32bit
libgstisoff-1_0-0-32bit
libgstwayland-1_0-0-64bit-debuginfo
libgstwebrtc-1_0-0-64bit
libgstplayer-1_0-0-64bit
libgstsctp-1_0-0-64bit
libgstbasecamerabinsrc-1_0-0-64bit-debuginfo
libgstvulkan-1_0-0-64bit-debuginfo
libgstinsertbin-1_0-0-64bit-debuginfo
libgstphotography-1_0-0-64bit
libgstwebrtcnice-1_0-0-64bit-debuginfo
libgstwebrtcnice-1_0-0-64bit
libgstcuda-1_0-0-64bit-debuginfo
libgstcuda-1_0-0-64bit
libgstwebrtcnice-1_0-0-32bit
libgstcuda-1_0-0-32bit-debuginfo
libgstcuda-1_0-0-32bit
libgstwebrtcnice-1_0-0-32bit-debuginfo
libgstwebrtcnice-1_0-0-debuginfo
libgstwebrtcnice-1_0-0
typelib-1_0-GstCuda-1_0
libgstcuda-1_0-0-debuginfo
typelib-1_0-CudaGst-1_0
typelib-1_0-GstVa-1_0
libgstcuda-1_0-0
gstreamer1-plugins-bad-free-libs
gstreamer1-plugins-bad-free
gstreamer1-plugins-bad-free-devel
typelib-1_0-GstDxva-1_0
libgstdxva-1_0-0-debuginfo
typelib-1_0-GstAnalytics-1_0
libgstanalytics-1_0-0-debuginfo
libgstanalytics-1_0-0-64bit
libgsttranscoder-1_0-0-64bit
libgstmse-1_0-0-debuginfo
libgstanalytics-1_0-0
typelib-1_0-GstMse-1_0
libgstmse-1_0-0
libgstdxva-1_0-0
libgstdxva-1_0-0-32bit-debuginfo
libgsttranscoder-1_0-0-32bit-debuginfo
libgsttranscoder-1_0-0-32bit
libgstmse-1_0-0-32bit
libgstanalytics-1_0-0-32bit
libgstmse-1_0-0-32bit-debuginfo
libgstmse-1_0-0-64bit
libgstdxva-1_0-0-64bit
libgstdxva-1_0-0-64bit-debuginfo
libgstdxva-1_0-0-32bit
libgstanalytics-1_0-0-32bit-debuginfo
libgstmse-1_0-0-64bit-debuginfo
libgsttranscoder-1_0-0-64bit-debuginfo
libgstanalytics-1_0-0-64bit-debuginfo

Install security update from vendor's website.

gst-plugins-bad - update to 1.28.5
gstreamer - update to 1.28.5
gstreamer1-plugins-bad-free (Red Hat package) - addressed in versions 1.10.4-6.el7_9, 1.16.1-4.el8_4.2, 1.16.1-4.el8_6.2, 1.16.1-4.el8_8.2, 1.16.1-8.el8_10, 1.24.11-3.el10_0.4, 1.26.7-2.el10_2.4
libgstbadaudio-1_0-0-debuginfo - addressed in versions 1.20.1-150400.3.29.1, 1.22.0-150500.3.34.1, 1.24.0-150600.4.9.1
libgstsctp-1_0-0-debuginfo - addressed in versions 1.20.1-150400.3.29.1, 1.22.0-150500.3.34.1, 1.24.0-150600.4.9.1
libgsturidownloader-1_0-0 - addressed in versions 1.20.1-150400.3.29.1, 1.22.0-150500.3.34.1, 1.24.0-150600.4.9.1
typelib-1_0-GstPlay-1_0 - addressed in versions 1.20.1-150400.3.29.1, 1.22.0-150500.3.34.1, 1.24.0-150600.4.9.1
libgstplayer-1_0-0-debuginfo - addressed in versions 1.20.1-150400.3.29.1, 1.22.0-150500.3.34.1, 1.24.0-150600.4.9.1
libgstbadaudio-1_0-0 - addressed in versions 1.20.1-150400.3.29.1, 1.22.0-150500.3.34.1, 1.24.0-150600.4.9.1
libgstbasecamerabinsrc-1_0-0-debuginfo - addressed in versions 1.20.1-150400.3.29.1, 1.22.0-150500.3.34.1, 1.24.0-150600.4.9.1
typelib-1_0-GstVulkanXCB-1_0 - addressed in versions 1.20.1-150400.3.29.1, 1.22.0-150500.3.34.1, 1.24.0-150600.4.9.1
libgstcodecparsers-1_0-0-debuginfo - addressed in versions 1.20.1-150400.3.29.1, 1.22.0-150500.3.34.1, 1.24.0-150600.4.9.1
libgstsctp-1_0-0 - addressed in versions 1.20.1-150400.3.29.1, 1.22.0-150500.3.34.1, 1.24.0-150600.4.9.1
libgstwebrtc-1_0-0-debuginfo - addressed in versions 1.20.1-150400.3.29.1, 1.22.0-150500.3.34.1, 1.24.0-150600.4.9.1
typelib-1_0-GstVulkanWayland-1_0 - addressed in versions 1.20.1-150400.3.29.1, 1.22.0-150500.3.34.1, 1.24.0-150600.4.9.1
typelib-1_0-GstVulkan-1_0 - addressed in versions 1.20.1-150400.3.29.1, 1.22.0-150500.3.34.1, 1.24.0-150600.4.9.1
libgstphotography-1_0-0-debuginfo - addressed in versions 1.20.1-150400.3.29.1, 1.22.0-150500.3.34.1, 1.24.0-150600.4.9.1
libgstcodecparsers-1_0-0 - addressed in versions 1.20.1-150400.3.29.1, 1.22.0-150500.3.34.1, 1.24.0-150600.4.9.1
typelib-1_0-GstWebRTC-1_0 - addressed in versions 1.20.1-150400.3.29.1, 1.22.0-150500.3.34.1, 1.24.0-150600.4.9.1
libgstinsertbin-1_0-0-64bit - addressed in versions 1.20.1-150400.3.29.1, 1.22.0-150500.3.34.1, 1.24.0-150600.4.9.1
libgstva-1_0-0-64bit - addressed in versions 1.20.1-150400.3.29.1, 1.22.0-150500.3.34.1, 1.24.0-150600.4.9.1
gstreamer-transcoder-debuginfo - addressed in versions 1.20.1-150400.3.29.1, 1.22.0-150500.3.34.1, 1.24.0-150600.4.9.1
gstreamer-plugins-bad-chromaprint-64bit-debuginfo - addressed in versions 1.20.1-150400.3.29.1, 1.22.0-150500.3.34.1, 1.24.0-150600.4.9.1
libgstisoff-1_0-0-64bit - addressed in versions 1.20.1-150400.3.29.1, 1.22.0-150500.3.34.1, 1.24.0-150600.4.9.1
libgstcodecs-1_0-0-64bit-debuginfo - addressed in versions 1.20.1-150400.3.29.1, 1.22.0-150500.3.34.1, 1.24.0-150600.4.9.1
libgstsctp-1_0-0-64bit-debuginfo - addressed in versions 1.20.1-150400.3.29.1, 1.22.0-150500.3.34.1, 1.24.0-150600.4.9.1
libgstplayer-1_0-0-64bit-debuginfo - addressed in versions 1.20.1-150400.3.29.1, 1.22.0-150500.3.34.1, 1.24.0-150600.4.9.1
libgstplay-1_0-0-64bit-debuginfo - addressed in versions 1.20.1-150400.3.29.1, 1.22.0-150500.3.34.1, 1.24.0-150600.4.9.1
libgstisoff-1_0-0-64bit-debuginfo - addressed in versions 1.20.1-150400.3.29.1, 1.22.0-150500.3.34.1, 1.24.0-150600.4.9.1
gstreamer-plugins-bad-debugsource - addressed in versions 1.20.1-150400.3.29.1, 1.22.0-150500.3.34.1, 1.24.0-150600.4.9.1
libgstbadaudio-1_0-0-64bit-debuginfo - addressed in versions 1.20.1-150400.3.29.1, 1.22.0-150500.3.34.1, 1.24.0-150600.4.9.1
libgstcodecparsers-1_0-0-64bit - addressed in versions 1.20.1-150400.3.29.1, 1.22.0-150500.3.34.1, 1.24.0-150600.4.9.1
typelib-1_0-GstInsertBin-1_0 - addressed in versions 1.20.1-150400.3.29.1, 1.22.0-150500.3.34.1, 1.24.0-150600.4.9.1
typelib-1_0-GstTranscoder-1_0 - addressed in versions 1.20.1-150400.3.29.1, 1.22.0-150500.3.34.1, 1.24.0-150600.4.9.1
typelib-1_0-GstCodecs-1_0 - addressed in versions 1.20.1-150400.3.29.1, 1.22.0-150500.3.34.1, 1.24.0-150600.4.9.1
libgstisoff-1_0-0-debuginfo - addressed in versions 1.20.1-150400.3.29.1, 1.22.0-150500.3.34.1, 1.24.0-150600.4.9.1
gstreamer-plugins-bad-devel - addressed in versions 1.20.1-150400.3.29.1, 1.22.0-150500.3.34.1, 1.24.0-150600.4.9.1
libgstcodecs-1_0-0 - addressed in versions 1.20.1-150400.3.29.1, 1.22.0-150500.3.34.1, 1.24.0-150600.4.9.1
libgsturidownloader-1_0-0-debuginfo - addressed in versions 1.20.1-150400.3.29.1, 1.22.0-150500.3.34.1, 1.24.0-150600.4.9.1
typelib-1_0-GstMpegts-1_0 - addressed in versions 1.20.1-150400.3.29.1, 1.22.0-150500.3.34.1, 1.24.0-150600.4.9.1
gstreamer-plugins-bad-chromaprint - addressed in versions 1.20.1-150400.3.29.1, 1.22.0-150500.3.34.1, 1.24.0-150600.4.9.1
libgstplay-1_0-0-debuginfo - addressed in versions 1.20.1-150400.3.29.1, 1.22.0-150500.3.34.1, 1.24.0-150600.4.9.1
libgstwebrtc-1_0-0 - addressed in versions 1.20.1-150400.3.29.1, 1.22.0-150500.3.34.1, 1.24.0-150600.4.9.1
libgsttranscoder-1_0-0-debuginfo - addressed in versions 1.20.1-150400.3.29.1, 1.22.0-150500.3.34.1, 1.24.0-150600.4.9.1
libgstadaptivedemux-1_0-0-debuginfo - addressed in versions 1.20.1-150400.3.29.1, 1.22.0-150500.3.34.1, 1.24.0-150600.4.9.1
libgstvulkan-1_0-0-debuginfo - addressed in versions 1.20.1-150400.3.29.1, 1.22.0-150500.3.34.1, 1.24.0-150600.4.9.1
libgstmpegts-1_0-0-debuginfo - addressed in versions 1.20.1-150400.3.29.1, 1.22.0-150500.3.34.1, 1.24.0-150600.4.9.1
libgsttranscoder-1_0-0 - addressed in versions 1.20.1-150400.3.29.1, 1.22.0-150500.3.34.1, 1.24.0-150600.4.9.1
libgstplayer-1_0-0 - addressed in versions 1.20.1-150400.3.29.1, 1.22.0-150500.3.34.1, 1.24.0-150600.4.9.1
gstreamer-plugins-bad-debuginfo - addressed in versions 1.20.1-150400.3.29.1, 1.22.0-150500.3.34.1, 1.24.0-150600.4.9.1
libgstisoff-1_0-0 - addressed in versions 1.20.1-150400.3.29.1, 1.22.0-150500.3.34.1, 1.24.0-150600.4.9.1
libgstadaptivedemux-1_0-0 - addressed in versions 1.20.1-150400.3.29.1, 1.22.0-150500.3.34.1, 1.24.0-150600.4.9.1
libgstva-1_0-0 - addressed in versions 1.20.1-150400.3.29.1, 1.22.0-150500.3.34.1, 1.24.0-150600.4.9.1
gstreamer-plugins-bad - addressed in versions 1.20.1-150400.3.29.1, 1.22.0-150500.3.34.1, 1.24.0-150600.4.9.1
libgstinsertbin-1_0-0-debuginfo - addressed in versions 1.20.1-150400.3.29.1, 1.22.0-150500.3.34.1, 1.24.0-150600.4.9.1
gstreamer-plugins-bad-chromaprint-debuginfo - addressed in versions 1.20.1-150400.3.29.1, 1.22.0-150500.3.34.1, 1.24.0-150600.4.9.1
libgstbasecamerabinsrc-1_0-0 - addressed in versions 1.20.1-150400.3.29.1, 1.22.0-150500.3.34.1, 1.24.0-150600.4.9.1
typelib-1_0-GstPlayer-1_0 - addressed in versions 1.20.1-150400.3.29.1, 1.22.0-150500.3.34.1, 1.24.0-150600.4.9.1
libgstcodecs-1_0-0-debuginfo - addressed in versions 1.20.1-150400.3.29.1, 1.22.0-150500.3.34.1, 1.24.0-150600.4.9.1
typelib-1_0-GstBadAudio-1_0 - addressed in versions 1.20.1-150400.3.29.1, 1.22.0-150500.3.34.1, 1.24.0-150600.4.9.1
libgstwayland-1_0-0-debuginfo - addressed in versions 1.20.1-150400.3.29.1, 1.22.0-150500.3.34.1, 1.24.0-150600.4.9.1
libgstvulkan-1_0-0 - addressed in versions 1.20.1-150400.3.29.1, 1.22.0-150500.3.34.1, 1.24.0-150600.4.9.1
gstreamer-transcoder - addressed in versions 1.20.1-150400.3.29.1, 1.22.0-150500.3.34.1, 1.24.0-150600.4.9.1
libgstinsertbin-1_0-0 - addressed in versions 1.20.1-150400.3.29.1, 1.22.0-150500.3.34.1, 1.24.0-150600.4.9.1
libgstmpegts-1_0-0 - addressed in versions 1.20.1-150400.3.29.1, 1.22.0-150500.3.34.1, 1.24.0-150600.4.9.1
gstreamer-transcoder-devel - addressed in versions 1.20.1-150400.3.29.1, 1.22.0-150500.3.34.1, 1.24.0-150600.4.9.1
libgstplay-1_0-0 - addressed in versions 1.20.1-150400.3.29.1, 1.22.0-150500.3.34.1, 1.24.0-150600.4.9.1
libgstphotography-1_0-0 - addressed in versions 1.20.1-150400.3.29.1, 1.22.0-150500.3.34.1, 1.24.0-150600.4.9.1
libgstva-1_0-0-debuginfo - addressed in versions 1.20.1-150400.3.29.1, 1.22.0-150500.3.34.1, 1.24.0-150600.4.9.1
libgstwayland-1_0-0 - addressed in versions 1.20.1-150400.3.29.1, 1.22.0-150500.3.34.1, 1.24.0-150600.4.9.1
libgstsctp-1_0-0-32bit-debuginfo - addressed in versions 1.20.1-150400.3.29.1, 1.22.0-150500.3.34.1, 1.24.0-150600.4.9.1
gstreamer-plugins-bad-32bit - addressed in versions 1.20.1-150400.3.29.1, 1.22.0-150500.3.34.1, 1.24.0-150600.4.9.1
libgstadaptivedemux-1_0-0-32bit - addressed in versions 1.20.1-150400.3.29.1, 1.22.0-150500.3.34.1, 1.24.0-150600.4.9.1
libgstplayer-1_0-0-32bit - addressed in versions 1.20.1-150400.3.29.1, 1.22.0-150500.3.34.1, 1.24.0-150600.4.9.1
libgstisoff-1_0-0-32bit-debuginfo - addressed in versions 1.20.1-150400.3.29.1, 1.22.0-150500.3.34.1, 1.24.0-150600.4.9.1
gstreamer-plugins-bad-chromaprint-32bit - addressed in versions 1.20.1-150400.3.29.1, 1.22.0-150500.3.34.1, 1.24.0-150600.4.9.1
libgstadaptivedemux-1_0-0-64bit - addressed in versions 1.20.1-150400.3.29.1, 1.22.0-150500.3.34.1, 1.24.0-150600.4.9.1
libgstvulkan-1_0-0-32bit - addressed in versions 1.20.1-150400.3.29.1, 1.22.0-150500.3.34.1, 1.24.0-150600.4.9.1
libgstplayer-1_0-0-32bit-debuginfo - addressed in versions 1.20.1-150400.3.29.1, 1.22.0-150500.3.34.1, 1.24.0-150600.4.9.1
libgstwayland-1_0-0-32bit - addressed in versions 1.20.1-150400.3.29.1, 1.22.0-150500.3.34.1, 1.24.0-150600.4.9.1
libgstphotography-1_0-0-32bit - addressed in versions 1.20.1-150400.3.29.1, 1.22.0-150500.3.34.1, 1.24.0-150600.4.9.1
libgstmpegts-1_0-0-32bit-debuginfo - addressed in versions 1.20.1-150400.3.29.1, 1.22.0-150500.3.34.1, 1.24.0-150600.4.9.1
gstreamer-plugins-bad-32bit-debuginfo - addressed in versions 1.20.1-150400.3.29.1, 1.22.0-150500.3.34.1, 1.24.0-150600.4.9.1
libgstvulkan-1_0-0-32bit-debuginfo - addressed in versions 1.20.1-150400.3.29.1, 1.22.0-150500.3.34.1, 1.24.0-150600.4.9.1
libgstwebrtc-1_0-0-32bit - addressed in versions 1.20.1-150400.3.29.1, 1.22.0-150500.3.34.1, 1.24.0-150600.4.9.1
libgstwayland-1_0-0-32bit-debuginfo - addressed in versions 1.20.1-150400.3.29.1, 1.22.0-150500.3.34.1, 1.24.0-150600.4.9.1
libgstinsertbin-1_0-0-32bit - addressed in versions 1.20.1-150400.3.29.1, 1.22.0-150500.3.34.1, 1.24.0-150600.4.9.1
libgstadaptivedemux-1_0-0-32bit-debuginfo - addressed in versions 1.20.1-150400.3.29.1, 1.22.0-150500.3.34.1, 1.24.0-150600.4.9.1
gstreamer-plugins-bad-lang - addressed in versions 1.20.1-150400.3.29.1, 1.22.0-150500.3.34.1, 1.24.0-150600.4.9.1
libgstva-1_0-0-32bit - addressed in versions 1.20.1-150400.3.29.1, 1.22.0-150500.3.34.1, 1.24.0-150600.4.9.1
libgstbasecamerabinsrc-1_0-0-32bit - addressed in versions 1.20.1-150400.3.29.1, 1.22.0-150500.3.34.1, 1.24.0-150600.4.9.1
libgstcodecs-1_0-0-32bit - addressed in versions 1.20.1-150400.3.29.1, 1.22.0-150500.3.34.1, 1.24.0-150600.4.9.1
libgstplay-1_0-0-32bit - addressed in versions 1.20.1-150400.3.29.1, 1.22.0-150500.3.34.1, 1.24.0-150600.4.9.1
libgstphotography-1_0-0-32bit-debuginfo - addressed in versions 1.20.1-150400.3.29.1, 1.22.0-150500.3.34.1, 1.24.0-150600.4.9.1
gstreamer-plugins-bad-chromaprint-32bit-debuginfo - addressed in versions 1.20.1-150400.3.29.1, 1.22.0-150500.3.34.1, 1.24.0-150600.4.9.1
libgstva-1_0-0-32bit-debuginfo - addressed in versions 1.20.1-150400.3.29.1, 1.22.0-150500.3.34.1, 1.24.0-150600.4.9.1
libgstphotography-1_0-0-64bit-debuginfo - addressed in versions 1.20.1-150400.3.29.1, 1.22.0-150500.3.34.1, 1.24.0-150600.4.9.1
libgstwebrtc-1_0-0-32bit-debuginfo - addressed in versions 1.20.1-150400.3.29.1, 1.22.0-150500.3.34.1, 1.24.0-150600.4.9.1
libgstbadaudio-1_0-0-32bit - addressed in versions 1.20.1-150400.3.29.1, 1.22.0-150500.3.34.1, 1.24.0-150600.4.9.1
libgsturidownloader-1_0-0-32bit-debuginfo - addressed in versions 1.20.1-150400.3.29.1, 1.22.0-150500.3.34.1, 1.24.0-150600.4.9.1
libgstsctp-1_0-0-32bit - addressed in versions 1.20.1-150400.3.29.1, 1.22.0-150500.3.34.1, 1.24.0-150600.4.9.1
libgstcodecs-1_0-0-32bit-debuginfo - addressed in versions 1.20.1-150400.3.29.1, 1.22.0-150500.3.34.1, 1.24.0-150600.4.9.1
libgsturidownloader-1_0-0-32bit - addressed in versions 1.20.1-150400.3.29.1, 1.22.0-150500.3.34.1, 1.24.0-150600.4.9.1
libgstbadaudio-1_0-0-32bit-debuginfo - addressed in versions 1.20.1-150400.3.29.1, 1.22.0-150500.3.34.1, 1.24.0-150600.4.9.1
libgstmpegts-1_0-0-64bit-debuginfo - addressed in versions 1.20.1-150400.3.29.1, 1.22.0-150500.3.34.1, 1.24.0-150600.4.9.1
libgstcodecs-1_0-0-64bit - addressed in versions 1.20.1-150400.3.29.1, 1.22.0-150500.3.34.1, 1.24.0-150600.4.9.1
libgstadaptivedemux-1_0-0-64bit-debuginfo - addressed in versions 1.20.1-150400.3.29.1, 1.22.0-150500.3.34.1, 1.24.0-150600.4.9.1
libgstmpegts-1_0-0-64bit - addressed in versions 1.20.1-150400.3.29.1, 1.22.0-150500.3.34.1, 1.24.0-150600.4.9.1
libgstva-1_0-0-64bit-debuginfo - addressed in versions 1.20.1-150400.3.29.1, 1.22.0-150500.3.34.1, 1.24.0-150600.4.9.1
libgstbadaudio-1_0-0-64bit - addressed in versions 1.20.1-150400.3.29.1, 1.22.0-150500.3.34.1, 1.24.0-150600.4.9.1
libgstplay-1_0-0-64bit - addressed in versions 1.20.1-150400.3.29.1, 1.22.0-150500.3.34.1, 1.24.0-150600.4.9.1
libgsturidownloader-1_0-0-64bit - addressed in versions 1.20.1-150400.3.29.1, 1.22.0-150500.3.34.1, 1.24.0-150600.4.9.1
gstreamer-plugins-bad-64bit - addressed in versions 1.20.1-150400.3.29.1, 1.22.0-150500.3.34.1, 1.24.0-150600.4.9.1
libgstinsertbin-1_0-0-32bit-debuginfo - addressed in versions 1.20.1-150400.3.29.1, 1.22.0-150500.3.34.1, 1.24.0-150600.4.9.1
gstreamer-plugins-bad-chromaprint-64bit - addressed in versions 1.20.1-150400.3.29.1, 1.22.0-150500.3.34.1, 1.24.0-150600.4.9.1
libgstcodecparsers-1_0-0-64bit-debuginfo - addressed in versions 1.20.1-150400.3.29.1, 1.22.0-150500.3.34.1, 1.24.0-150600.4.9.1
libgstwebrtc-1_0-0-64bit-debuginfo - addressed in versions 1.20.1-150400.3.29.1, 1.22.0-150500.3.34.1, 1.24.0-150600.4.9.1
libgsturidownloader-1_0-0-64bit-debuginfo - addressed in versions 1.20.1-150400.3.29.1, 1.22.0-150500.3.34.1, 1.24.0-150600.4.9.1
gstreamer-plugins-bad-64bit-debuginfo - addressed in versions 1.20.1-150400.3.29.1, 1.22.0-150500.3.34.1, 1.24.0-150600.4.9.1
libgstvulkan-1_0-0-64bit - addressed in versions 1.20.1-150400.3.29.1, 1.22.0-150500.3.34.1, 1.24.0-150600.4.9.1
libgstcodecparsers-1_0-0-32bit-debuginfo - addressed in versions 1.20.1-150400.3.29.1, 1.22.0-150500.3.34.1, 1.24.0-150600.4.9.1
libgstwayland-1_0-0-64bit - addressed in versions 1.20.1-150400.3.29.1, 1.22.0-150500.3.34.1, 1.24.0-150600.4.9.1
libgstbasecamerabinsrc-1_0-0-64bit - addressed in versions 1.20.1-150400.3.29.1, 1.22.0-150500.3.34.1, 1.24.0-150600.4.9.1
libgstplay-1_0-0-32bit-debuginfo - addressed in versions 1.20.1-150400.3.29.1, 1.22.0-150500.3.34.1, 1.24.0-150600.4.9.1
libgstmpegts-1_0-0-32bit - addressed in versions 1.20.1-150400.3.29.1, 1.22.0-150500.3.34.1, 1.24.0-150600.4.9.1
libgstbasecamerabinsrc-1_0-0-32bit-debuginfo - addressed in versions 1.20.1-150400.3.29.1, 1.22.0-150500.3.34.1, 1.24.0-150600.4.9.1
libgstcodecparsers-1_0-0-32bit - addressed in versions 1.20.1-150400.3.29.1, 1.22.0-150500.3.34.1, 1.24.0-150600.4.9.1
libgstisoff-1_0-0-32bit - addressed in versions 1.20.1-150400.3.29.1, 1.22.0-150500.3.34.1, 1.24.0-150600.4.9.1
libgstwayland-1_0-0-64bit-debuginfo - addressed in versions 1.20.1-150400.3.29.1, 1.22.0-150500.3.34.1, 1.24.0-150600.4.9.1
libgstwebrtc-1_0-0-64bit - addressed in versions 1.20.1-150400.3.29.1, 1.22.0-150500.3.34.1, 1.24.0-150600.4.9.1
libgstplayer-1_0-0-64bit - addressed in versions 1.20.1-150400.3.29.1, 1.22.0-150500.3.34.1, 1.24.0-150600.4.9.1
libgstsctp-1_0-0-64bit - addressed in versions 1.20.1-150400.3.29.1, 1.22.0-150500.3.34.1, 1.24.0-150600.4.9.1
libgstbasecamerabinsrc-1_0-0-64bit-debuginfo - addressed in versions 1.20.1-150400.3.29.1, 1.22.0-150500.3.34.1, 1.24.0-150600.4.9.1
libgstvulkan-1_0-0-64bit-debuginfo - addressed in versions 1.20.1-150400.3.29.1, 1.22.0-150500.3.34.1, 1.24.0-150600.4.9.1
libgstinsertbin-1_0-0-64bit-debuginfo - addressed in versions 1.20.1-150400.3.29.1, 1.22.0-150500.3.34.1, 1.24.0-150600.4.9.1
libgstphotography-1_0-0-64bit - addressed in versions 1.20.1-150400.3.29.1, 1.22.0-150500.3.34.1, 1.24.0-150600.4.9.1
libgstwebrtcnice-1_0-0-64bit-debuginfo - addressed in versions 1.22.0-150500.3.34.1, 1.24.0-150600.4.9.1
libgstwebrtcnice-1_0-0-64bit - addressed in versions 1.22.0-150500.3.34.1, 1.24.0-150600.4.9.1
libgstcuda-1_0-0-64bit-debuginfo - addressed in versions 1.22.0-150500.3.34.1, 1.24.0-150600.4.9.1
libgstcuda-1_0-0-64bit - addressed in versions 1.22.0-150500.3.34.1, 1.24.0-150600.4.9.1
libgstwebrtcnice-1_0-0-32bit - addressed in versions 1.22.0-150500.3.34.1, 1.24.0-150600.4.9.1
libgstcuda-1_0-0-32bit-debuginfo - addressed in versions 1.22.0-150500.3.34.1, 1.24.0-150600.4.9.1
libgstcuda-1_0-0-32bit - addressed in versions 1.22.0-150500.3.34.1, 1.24.0-150600.4.9.1
libgstwebrtcnice-1_0-0-32bit-debuginfo - addressed in versions 1.22.0-150500.3.34.1, 1.24.0-150600.4.9.1
libgstwebrtcnice-1_0-0-debuginfo - addressed in versions 1.22.0-150500.3.34.1, 1.24.0-150600.4.9.1
libgstwebrtcnice-1_0-0 - addressed in versions 1.22.0-150500.3.34.1, 1.24.0-150600.4.9.1
typelib-1_0-GstCuda-1_0 - addressed in versions 1.22.0-150500.3.34.1, 1.24.0-150600.4.9.1
libgstcuda-1_0-0-debuginfo - addressed in versions 1.22.0-150500.3.34.1, 1.24.0-150600.4.9.1
typelib-1_0-CudaGst-1_0 - addressed in versions 1.22.0-150500.3.34.1, 1.24.0-150600.4.9.1
typelib-1_0-GstVa-1_0 - addressed in versions 1.22.0-150500.3.34.1, 1.24.0-150600.4.9.1
libgstcuda-1_0-0 - addressed in versions 1.22.0-150500.3.34.1, 1.24.0-150600.4.9.1
gstreamer1-plugins-bad-free-libs - update to 1.22.12-7.0.1
gstreamer1-plugins-bad-free - update to 1.22.12-7.0.1
gstreamer1-plugins-bad-free-devel - update to 1.22.12-7.0.1
typelib-1_0-GstDxva-1_0 - update to 1.24.0-150600.4.9.1
libgstdxva-1_0-0-debuginfo - update to 1.24.0-150600.4.9.1
typelib-1_0-GstAnalytics-1_0 - update to 1.24.0-150600.4.9.1
libgstanalytics-1_0-0-debuginfo - update to 1.24.0-150600.4.9.1
libgstanalytics-1_0-0-64bit - update to 1.24.0-150600.4.9.1
libgsttranscoder-1_0-0-64bit - update to 1.24.0-150600.4.9.1
libgstmse-1_0-0-debuginfo - update to 1.24.0-150600.4.9.1
libgstanalytics-1_0-0 - update to 1.24.0-150600.4.9.1
typelib-1_0-GstMse-1_0 - update to 1.24.0-150600.4.9.1
libgstmse-1_0-0 - update to 1.24.0-150600.4.9.1
libgstdxva-1_0-0 - update to 1.24.0-150600.4.9.1
libgstdxva-1_0-0-32bit-debuginfo - update to 1.24.0-150600.4.9.1
libgsttranscoder-1_0-0-32bit-debuginfo - update to 1.24.0-150600.4.9.1
libgsttranscoder-1_0-0-32bit - update to 1.24.0-150600.4.9.1
libgstmse-1_0-0-32bit - update to 1.24.0-150600.4.9.1
libgstanalytics-1_0-0-32bit - update to 1.24.0-150600.4.9.1
libgstmse-1_0-0-32bit-debuginfo - update to 1.24.0-150600.4.9.1
libgstmse-1_0-0-64bit - update to 1.24.0-150600.4.9.1
libgstdxva-1_0-0-64bit - update to 1.24.0-150600.4.9.1
libgstdxva-1_0-0-64bit-debuginfo - update to 1.24.0-150600.4.9.1
libgstdxva-1_0-0-32bit - update to 1.24.0-150600.4.9.1
libgstanalytics-1_0-0-32bit-debuginfo - update to 1.24.0-150600.4.9.1
libgstmse-1_0-0-64bit-debuginfo - update to 1.24.0-150600.4.9.1
libgsttranscoder-1_0-0-64bit-debuginfo - update to 1.24.0-150600.4.9.1
libgstanalytics-1_0-0-64bit-debuginfo - update to 1.24.0-150600.4.9.1

• https://gstreamer.freedesktop.org/security/sa-2026-0046.html
• https://gitlab.freedesktop.org/gstreamer/gstreamer/-/commit/6c146775d784bbe91ff7afc6701ba351306282ce.patch

• Multiple vulnerabilities in GStreamer
• Red Hat Enterprise Linux 10 update for gstreamer1-plugins-bad-free
• Red Hat Enterprise Linux 8 update for gstreamer1-plugins-bad-free
• Red Hat Enterprise Linux 8 update for gstreamer1-plugins-bad-free
• Red Hat Enterprise Linux 8 update for gstreamer1-plugins-bad-free
• Red Hat Enterprise Linux 7 Extended Lifecycle Support update for gstreamer1-plugins-bad-free
• Red Hat Enterprise Linux 10 update for gstreamer1-plugins-bad-free
• Red Hat Enterprise Linux 8 update for gstreamer1-plugins-bad-free
• SUSE update for gstreamer-plugins-bad
• SUSE update for gstreamer-plugins-bad
• SUSE update for gstreamer-plugins-bad
• Anolis OS update for gstreamer1-plugins-bad-free