CVE-2026-18299

EUVD-2026-63448
GStreamer rtpsbcdepay Use-After-Free Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of GStreamer. Interaction with this library is required to exploit this vulnerability but attack vectors may vary depending on the implementation.

The specific flaw exists within the processing of RTP payload elements. The issue results from the lack of validating the existence of an object prior to performing operations on the object. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-29787.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
7.8 HIGH
LOCAL
LOW
NONE
CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Base Score
CVSS 3.x
EPSS Score
Percentile: 9.76%
Affected Products (NVD)
VendorProductVersion
gstreamergstreamer
𝑥
< 1.28.5
𝑥
= Vulnerable software versions
Debian logo
Debian Releases
Debian Product
Codename
gst-plugins-good1.0
bookworm
vulnerable
bookworm (security)
vulnerable
forky
1.28.7-1
fixed
sid
1.28.7-1
fixed
trixie
vulnerable
trixie (security)
vulnerable
Ubuntu logo
Ubuntu Releases
Ubuntu Product
Codename
gstreamer1.0
bionic
not-affected
focal
not-affected
jammy
not-affected
noble
not-affected
resolute
not-affected
xenial
not-affected
gst-plugins-good1.0
bionic
Fixed 1.14.5-0ubuntu1~18.04.3+esm3
released
focal
Fixed 1.16.3-0ubuntu1.3+esm3
released
jammy
Fixed 1.20.3-0ubuntu1.9
released
noble
Fixed 1.24.2-1ubuntu1.7
released
resolute
Fixed 1.28.2-2ubuntu0.3
released
xenial
Fixed 1.8.3-1ubuntu0.5+esm3
released
Red Hat logo
Red Hat Enterprise Linux Releases
Red Hat Product
Release
gstreamer1-plugins-good
RHEL 8
0:1.16.1-7.el8_10.7
fixed
RHEL 8.4 AUS
0:1.16.1-4.el8_4.5
fixed
RHEL 8.6 AUS
0:1.16.1-4.el8_6.6
fixed
RHEL 8.8 E4S
0:1.16.1-5.el8_8.6
fixed
RHEL 8.8 TUS
0:1.16.1-5.el8_8.6
fixed
RHEL 9
0:1.22.12-7.el9_8.8
fixed
gstreamer1-plugins-good-gtk
RHEL 8
0:1.16.1-7.el8_10.7
fixed
RHEL 8.4 AUS
0:1.16.1-4.el8_4.5
fixed
RHEL 8.6 AUS
0:1.16.1-4.el8_6.6
fixed
RHEL 8.8 E4S
0:1.16.1-5.el8_8.6
fixed
RHEL 8.8 TUS
0:1.16.1-5.el8_8.6
fixed
RHEL 9
0:1.22.12-7.el9_8.8
fixed
Common Weakness Enumeration
References
https://gstreamer.freedesktop.org/security/sa-2026-0051.html
https://www.zerodayinitiative.com/advisories/ZDI-26-467/