CVE-2026-2921

EUVD-2026-12115
GStreamer RIFF Palette Integer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of GStreamer. Interaction with this library is required to exploit this vulnerability but attack vectors may vary depending on the implementation.

The specific flaw exists within the handling of palette data in AVI files. The issue results from the lack of proper validation of user-supplied data, which can result in an integer overflow before writing to memory. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-28854.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
7.8 HIGH
LOCAL
LOW
NONE
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Base Score
CVSS 3.x
EPSS Score
Percentile: 55%
Affected Products (NVD)
VendorProductVersion
gstreamergstreamer
𝑥
< 1.28.1
𝑥
= Vulnerable software versions
Early Detection
Affected products identified ahead of NVD analysis through intelligence sources.
VendorProductVersionSource
Red HatRed Hat Enterprise Linux 10
0:1.24.11-3.el10_1 ≤
𝑥
< *
ADP
Red HatRed Hat Enterprise Linux 10
0:1.26.7-2.el10_2 ≤
𝑥
< *
ADP
Red HatRed Hat Enterprise Linux 10
0:1.24.11-2.el10_1 ≤
𝑥
< *
ADP
Red HatRed Hat Enterprise Linux 10
0:1.26.7-2.el10_2 ≤
𝑥
< *
ADP
Red HatRed Hat Enterprise Linux 10
0:1.24.11-2.el10_1 ≤
𝑥
< *
ADP
Red HatRed Hat Enterprise Linux 10
0:1.26.7-2.el10_2 ≤
𝑥
< *
ADP
Red HatRed Hat Enterprise Linux 10
0:1.24.11-2.el10_1 ≤
𝑥
< *
ADP
Red HatRed Hat Enterprise Linux 10
0:1.26.7-2.el10_2 ≤
𝑥
< *
ADP
Red HatRed Hat Enterprise Linux 10.0 Extended Update Support
0:1.24.11-3.el10_0 ≤
𝑥
< *
ADP
Red HatRed Hat Enterprise Linux 10.0 Extended Update Support
0:1.24.11-1.el10_0.1 ≤
𝑥
< *
ADP
Red HatRed Hat Enterprise Linux 10.0 Extended Update Support
0:1.24.11-1.el10_0.2 ≤
𝑥
< *
ADP
Red HatRed Hat Enterprise Linux 10.0 Extended Update Support
0:1.24.11-1.el10_0.1 ≤
𝑥
< *
ADP
Red HatRed Hat Enterprise Linux 7 Extended Lifecycle Support
0:1.10.4-5.el7_9 ≤
𝑥
< *
ADP
Red HatRed Hat Enterprise Linux 7 Extended Lifecycle Support
0:1.10.4-4.el7_9 ≤
𝑥
< *
ADP
Red HatRed Hat Enterprise Linux 7 Extended Lifecycle Support
0:1.10.4-4.el7_9 ≤
𝑥
< *
ADP
Red HatRed Hat Enterprise Linux 7 Extended Lifecycle Support
0:0.10.36-11.el7_9 ≤
𝑥
< *
ADP
Red HatRed Hat Enterprise Linux 7 Extended Lifecycle Support
0:0.10.31-14.el7_9 ≤
𝑥
< *
ADP
Red HatRed Hat Enterprise Linux 8
0:1.16.1-6.el8_10 ≤
𝑥
< *
ADP
Red HatRed Hat Enterprise Linux 8
0:1.16.1-6.el8_10 ≤
𝑥
< *
ADP
Red HatRed Hat Enterprise Linux 8
0:1.16.1-6.el8_10 ≤
𝑥
< *
ADP
Red HatRed Hat Enterprise Linux 8.2 Advanced Update Support
0:1.16.1-4.el8_2 ≤
𝑥
< *
ADP
Red HatRed Hat Enterprise Linux 8.2 Advanced Update Support
0:1.16.1-3.el8_2 ≤
𝑥
< *
ADP
Red HatRed Hat Enterprise Linux 8.2 Advanced Update Support
0:1.16.1-3.el8_2 ≤
𝑥
< *
ADP
Red HatRed Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support
0:1.16.1-4.el8_4 ≤
𝑥
< *
ADP
Red HatRed Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support
0:1.16.1-4.el8_4 ≤
𝑥
< *
ADP
Red HatRed Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support
0:1.16.1-4.el8_4 ≤
𝑥
< *
ADP
Red HatRed Hat Enterprise Linux 8.4 Extended Update Support Long-Life Add-On
0:1.16.1-4.el8_4 ≤
𝑥
< *
ADP
Red HatRed Hat Enterprise Linux 8.4 Extended Update Support Long-Life Add-On
0:1.16.1-4.el8_4 ≤
𝑥
< *
ADP
Red HatRed Hat Enterprise Linux 8.4 Extended Update Support Long-Life Add-On
0:1.16.1-4.el8_4 ≤
𝑥
< *
ADP
Red HatRed Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support
0:1.16.1-4.el8_6 ≤
𝑥
< *
ADP
Red HatRed Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support
0:1.16.1-4.el8_6 ≤
𝑥
< *
ADP
Red HatRed Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support
0:1.16.1-4.el8_6 ≤
𝑥
< *
ADP
Red HatRed Hat Enterprise Linux 8.6 Telecommunications Update Service
0:1.16.1-4.el8_6 ≤
𝑥
< *
ADP
Red HatRed Hat Enterprise Linux 8.6 Telecommunications Update Service
0:1.16.1-4.el8_6 ≤
𝑥
< *
ADP
Red HatRed Hat Enterprise Linux 8.6 Telecommunications Update Service
0:1.16.1-4.el8_6 ≤
𝑥
< *
ADP
Red HatRed Hat Enterprise Linux 8.6 Update Services for SAP Solutions
0:1.16.1-4.el8_6 ≤
𝑥
< *
ADP
Red HatRed Hat Enterprise Linux 8.6 Update Services for SAP Solutions
0:1.16.1-4.el8_6 ≤
𝑥
< *
ADP
Red HatRed Hat Enterprise Linux 8.6 Update Services for SAP Solutions
0:1.16.1-4.el8_6 ≤
𝑥
< *
ADP
Red HatRed Hat Enterprise Linux 8.8 Telecommunications Update Service
0:1.16.1-4.el8_8 ≤
𝑥
< *
ADP
Red HatRed Hat Enterprise Linux 8.8 Telecommunications Update Service
0:1.16.1-4.el8_8 ≤
𝑥
< *
ADP
Red HatRed Hat Enterprise Linux 8.8 Telecommunications Update Service
0:1.16.1-5.el8_8 ≤
𝑥
< *
ADP
Red HatRed Hat Enterprise Linux 8.8 Update Services for SAP Solutions
0:1.16.1-4.el8_8 ≤
𝑥
< *
ADP
Red HatRed Hat Enterprise Linux 8.8 Update Services for SAP Solutions
0:1.16.1-4.el8_8 ≤
𝑥
< *
ADP
Red HatRed Hat Enterprise Linux 8.8 Update Services for SAP Solutions
0:1.16.1-5.el8_8 ≤
𝑥
< *
ADP
Red HatRed Hat Enterprise Linux 9
0:1.22.12-5.el9_7 ≤
𝑥
< *
ADP
Red HatRed Hat Enterprise Linux 9
0:1.22.12-7.el9_8 ≤
𝑥
< *
ADP
Red HatRed Hat Enterprise Linux 9
0:1.22.12-5.el9_7 ≤
𝑥
< *
ADP
Red HatRed Hat Enterprise Linux 9
0:1.22.12-8.el9_8 ≤
𝑥
< *
ADP
Red HatRed Hat Enterprise Linux 9
0:1.22.12-5.el9_7 ≤
𝑥
< *
ADP
Red HatRed Hat Enterprise Linux 9
0:1.22.12-7.el9_8 ≤
𝑥
< *
ADP
Red HatRed Hat Enterprise Linux 9
0:1.22.12-4.el9_7 ≤
𝑥
< *
ADP
Red HatRed Hat Enterprise Linux 9
0:1.22.12-6.el9_8 ≤
𝑥
< *
ADP
Red HatRed Hat Enterprise Linux 9.0 Update Services for SAP Solutions
0:1.18.4-8.el9_0 ≤
𝑥
< *
ADP
Red HatRed Hat Enterprise Linux 9.0 Update Services for SAP Solutions
0:1.18.4-8.el9_0 ≤
𝑥
< *
ADP
Red HatRed Hat Enterprise Linux 9.0 Update Services for SAP Solutions
0:1.18.4-7.el9_0 ≤
𝑥
< *
ADP
Red HatRed Hat Enterprise Linux 9.2 Update Services for SAP Solutions
0:1.18.4-9.el9_2 ≤
𝑥
< *
ADP
Red HatRed Hat Enterprise Linux 9.2 Update Services for SAP Solutions
0:1.18.4-8.el9_2 ≤
𝑥
< *
ADP
Red HatRed Hat Enterprise Linux 9.2 Update Services for SAP Solutions
0:1.18.4-8.el9_2 ≤
𝑥
< *
ADP
Red HatRed Hat Enterprise Linux 9.4 Extended Update Support
0:1.22.1-6.el9_4 ≤
𝑥
< *
ADP
Red HatRed Hat Enterprise Linux 9.4 Extended Update Support
0:1.22.1-4.el9_4 ≤
𝑥
< *
ADP
Red HatRed Hat Enterprise Linux 9.4 Extended Update Support
0:1.22.1-4.el9_4 ≤
𝑥
< *
ADP
Red HatRed Hat Enterprise Linux 9.6 Extended Update Support
0:1.22.12-5.el9_6 ≤
𝑥
< *
ADP
Red HatRed Hat Enterprise Linux 9.6 Extended Update Support
0:1.22.12-5.el9_6 ≤
𝑥
< *
ADP
Red HatRed Hat Enterprise Linux 9.6 Extended Update Support
0:1.22.12-5.el9_6 ≤
𝑥
< *
ADP
Red HatRed Hat Enterprise Linux 9.6 Extended Update Support
0:1.22.12-4.el9_6 ≤
𝑥
< *
ADP
Debian logo
Debian Releases
Debian Product
Codename
gst-plugins-base1.0
bookworm
1.22.0-3+deb12u6
fixed
bookworm (security)
1.22.0-3+deb12u6
fixed
bullseye
vulnerable
bullseye (security)
1.18.4-2+deb11u5
fixed
forky
1.28.5-1
fixed
sid
1.28.5-1
fixed
trixie
1.26.2-1+deb13u1
fixed
trixie (security)
1.26.2-1+deb13u1
fixed
Ubuntu logo
Ubuntu Releases
Ubuntu Product
Codename
gst-plugins-base1.0
bionic
Fixed 1.14.5-0ubuntu1~18.04.3+esm3
released
focal
Fixed 1.16.3-0ubuntu1.4+esm2
released
jammy
Fixed 1.20.1-1ubuntu0.6
released
noble
Fixed 1.24.2-1ubuntu0.4
released
questing
Fixed 1.26.6-1ubuntu0.1
released
resolute
not-affected
xenial
Fixed 1.8.3-1ubuntu0.3+esm4
released
Red Hat logo
Red Hat Enterprise Linux Releases
Red Hat Product
Release
gstreamer1-plugins-bad-free
RHEL 8
0:1.16.1-6.el8_10
fixed
RHEL 8.2 AUS
0:1.16.1-4.el8_2
fixed
RHEL 8.4 AUS
0:1.16.1-4.el8_4
fixed
RHEL 8.6 AUS
0:1.16.1-4.el8_6
fixed
RHEL 8.6 E4S
0:1.16.1-4.el8_6
fixed
RHEL 8.6 TUS
0:1.16.1-4.el8_6
fixed
RHEL 8.8 E4S
0:1.16.1-4.el8_8
fixed
RHEL 8.8 TUS
0:1.16.1-4.el8_8
fixed
RHEL 9
0:1.22.12-5.el9_7
fixed
gstreamer1-plugins-bad-free-devel
RHEL 8
0:1.16.1-6.el8_10
fixed
RHEL 9
0:1.22.12-5.el9_7
fixed
gstreamer1-plugins-bad-free-libs
RHEL 9
0:1.22.12-5.el9_7
fixed
gstreamer1-plugins-base
RHEL 8
0:1.16.1-6.el8_10
fixed
RHEL 8.2 AUS
0:1.16.1-3.el8_2
fixed
RHEL 8.4 AUS
0:1.16.1-4.el8_4
fixed
RHEL 8.6 AUS
0:1.16.1-4.el8_6
fixed
RHEL 8.6 E4S
0:1.16.1-4.el8_6
fixed
RHEL 8.6 TUS
0:1.16.1-4.el8_6
fixed
RHEL 8.8 E4S
0:1.16.1-4.el8_8
fixed
RHEL 8.8 TUS
0:1.16.1-4.el8_8
fixed
RHEL 9
0:1.22.12-5.el9_7
fixed
gstreamer1-plugins-base-devel
RHEL 8
0:1.16.1-6.el8_10
fixed
RHEL 8.2 AUS
0:1.16.1-3.el8_2
fixed
RHEL 8.4 AUS
0:1.16.1-4.el8_4
fixed
RHEL 8.6 AUS
0:1.16.1-4.el8_6
fixed
RHEL 8.6 E4S
0:1.16.1-4.el8_6
fixed
RHEL 8.6 TUS
0:1.16.1-4.el8_6
fixed
RHEL 8.8 E4S
0:1.16.1-4.el8_8
fixed
RHEL 8.8 TUS
0:1.16.1-4.el8_8
fixed
RHEL 9
0:1.22.12-5.el9_7
fixed
gstreamer1-plugins-base-tools
RHEL 9
0:1.22.12-5.el9_7
fixed
gstreamer1-plugins-good
RHEL 8
0:1.16.1-6.el8_10
fixed
RHEL 8.2 AUS
0:1.16.1-3.el8_2
fixed
RHEL 8.4 AUS
0:1.16.1-4.el8_4
fixed
RHEL 8.6 AUS
0:1.16.1-4.el8_6
fixed
RHEL 8.6 E4S
0:1.16.1-4.el8_6
fixed
RHEL 8.6 TUS
0:1.16.1-4.el8_6
fixed
RHEL 8.8 E4S
0:1.16.1-5.el8_8
fixed
RHEL 8.8 TUS
0:1.16.1-5.el8_8
fixed
RHEL 9
0:1.22.12-5.el9_7
fixed
gstreamer1-plugins-good-gtk
RHEL 8
0:1.16.1-6.el8_10
fixed
RHEL 8.2 AUS
0:1.16.1-3.el8_2
fixed
RHEL 8.4 AUS
0:1.16.1-4.el8_4
fixed
RHEL 8.6 AUS
0:1.16.1-4.el8_6
fixed
RHEL 8.6 E4S
0:1.16.1-4.el8_6
fixed
RHEL 8.6 TUS
0:1.16.1-4.el8_6
fixed
RHEL 8.8 E4S
0:1.16.1-5.el8_8
fixed
RHEL 8.8 TUS
0:1.16.1-5.el8_8
fixed
RHEL 9
0:1.22.12-5.el9_7
fixed
gstreamer1-plugins-ugly-free
RHEL 9
0:1.22.12-4.el9_7
fixed
Amazon Linux logo
Amazon Linux Releases
Amazon Package
Release
gstreamer1-plugins-base
Amazon Linux 2
0:1.18.4-5.amzn2.0.10
fixed
Amazon Linux 2023
0:1.24.10-1.amzn2023.0.3
fixed
gstreamer1-plugins-base-debuginfo
Amazon Linux 2
0:1.18.4-5.amzn2.0.10
fixed
Amazon Linux 2023
0:1.24.10-1.amzn2023.0.3
fixed
gstreamer1-plugins-base-debugsource
Amazon Linux 2023
0:1.24.10-1.amzn2023.0.3
fixed
gstreamer1-plugins-base-devel
Amazon Linux 2
0:1.18.4-5.amzn2.0.10
fixed
Amazon Linux 2023
0:1.24.10-1.amzn2023.0.3
fixed
gstreamer1-plugins-base-tools
Amazon Linux 2
0:1.18.4-5.amzn2.0.10
fixed
Amazon Linux 2023
0:1.24.10-1.amzn2023.0.3
fixed
gstreamer1-plugins-base-tools-debuginfo
Amazon Linux 2023
0:1.24.10-1.amzn2023.0.3
fixed
Common Weakness Enumeration
References
https://gitlab.freedesktop.org/gstreamer/gstreamer/-/commit/e3a99c35266fc92dd6a18ac5fde028d0cda559e6
https://www.zerodayinitiative.com/advisories/ZDI-26-168/
https://lists.debian.org/debian-lts-announce/2026/03/msg00018.html
https://access.redhat.com/errata/RHSA-2026:19024
https://access.redhat.com/errata/RHSA-2026:19180
https://access.redhat.com/errata/RHSA-2026:6259
https://access.redhat.com/errata/RHSA-2026:6300
https://access.redhat.com/errata/RHSA-2026:6750
https://access.redhat.com/errata/RHSA-2026:7673
https://access.redhat.com/errata/RHSA-2026:7850
https://access.redhat.com/errata/RHSA-2026:8854
https://access.redhat.com/errata/RHSA-2026:8857
https://access.redhat.com/errata/RHSA-2026:8862
https://access.redhat.com/errata/RHSA-2026:8874
https://access.redhat.com/errata/RHSA-2026:8876
https://access.redhat.com/errata/RHSA-2026:9446
https://access.redhat.com/errata/RHSA-2026:9447
https://access.redhat.com/errata/RHSA-2026:9487
https://access.redhat.com/errata/RHSA-2026:9488
https://access.redhat.com/security/cve/CVE-2026-2921
https://bugzilla.redhat.com/show_bug.cgi?id=2447496
https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-2921.json