CVE-2026-3082

EUVD-2026-12123
GStreamer JPEG Parser Heap-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of GStreamer. Interaction with this library is required to exploit this vulnerability but attack vectors may vary depending on the implementation.

The specific flaw exists within the processing of Huffman tables. The issue results from the lack of proper validation of the length of user-supplied data prior to copying it to a fixed-length heap-based buffer. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-28840.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
7.8 HIGH
LOCAL
LOW
NONE
CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Base Score
CVSS 3.x
EPSS Score
Percentile: 23%
Affected Products (NVD)
VendorProductVersion
gstreamergstreamer
𝑥
< 1.28.1
𝑥
= Vulnerable software versions
Debian logo
Debian Releases
Debian Product
Codename
gst-plugins-bad1.0
bookworm
1.22.0-4+deb12u7
fixed
bookworm (security)
1.22.0-4+deb12u7
fixed
bullseye
vulnerable
bullseye (security)
1.18.4-3+deb11u6
fixed
forky
1.28.3-1
fixed
sid
1.28.3-1
fixed
trixie
1.26.2-3+deb13u1
fixed
trixie (security)
1.26.2-3+deb13u1
fixed
Red Hat logo
Red Hat Enterprise Linux Releases
Red Hat Product
Release
gstreamer1-plugins-bad-free
RHEL 8
0:1.16.1-6.el8_10
fixed
RHEL 8.2 AUS
0:1.16.1-4.el8_2
fixed
RHEL 8.4 AUS
0:1.16.1-4.el8_4
fixed
RHEL 8.6 AUS
0:1.16.1-4.el8_6
fixed
RHEL 8.6 E4S
0:1.16.1-4.el8_6
fixed
RHEL 8.6 TUS
0:1.16.1-4.el8_6
fixed
RHEL 8.8 E4S
0:1.16.1-4.el8_8
fixed
RHEL 8.8 TUS
0:1.16.1-4.el8_8
fixed
RHEL 9
0:1.22.12-5.el9_7
fixed
gstreamer1-plugins-bad-free-devel
RHEL 8
0:1.16.1-6.el8_10
fixed
RHEL 9
0:1.22.12-5.el9_7
fixed
gstreamer1-plugins-bad-free-libs
RHEL 9
0:1.22.12-5.el9_7
fixed
gstreamer1-plugins-base
RHEL 8
0:1.16.1-6.el8_10
fixed
RHEL 8.2 AUS
0:1.16.1-3.el8_2
fixed
RHEL 8.4 AUS
0:1.16.1-4.el8_4
fixed
RHEL 8.6 AUS
0:1.16.1-4.el8_6
fixed
RHEL 8.6 E4S
0:1.16.1-4.el8_6
fixed
RHEL 8.6 TUS
0:1.16.1-4.el8_6
fixed
RHEL 8.8 E4S
0:1.16.1-4.el8_8
fixed
RHEL 8.8 TUS
0:1.16.1-4.el8_8
fixed
RHEL 9
0:1.22.12-5.el9_7
fixed
gstreamer1-plugins-base-devel
RHEL 8
0:1.16.1-6.el8_10
fixed
RHEL 8.2 AUS
0:1.16.1-3.el8_2
fixed
RHEL 8.4 AUS
0:1.16.1-4.el8_4
fixed
RHEL 8.6 AUS
0:1.16.1-4.el8_6
fixed
RHEL 8.6 E4S
0:1.16.1-4.el8_6
fixed
RHEL 8.6 TUS
0:1.16.1-4.el8_6
fixed
RHEL 8.8 E4S
0:1.16.1-4.el8_8
fixed
RHEL 8.8 TUS
0:1.16.1-4.el8_8
fixed
RHEL 9
0:1.22.12-5.el9_7
fixed
gstreamer1-plugins-base-tools
RHEL 9
0:1.22.12-5.el9_7
fixed
gstreamer1-plugins-good
RHEL 8
0:1.16.1-6.el8_10
fixed
RHEL 8.2 AUS
0:1.16.1-3.el8_2
fixed
RHEL 8.4 AUS
0:1.16.1-4.el8_4
fixed
RHEL 8.6 AUS
0:1.16.1-4.el8_6
fixed
RHEL 8.6 E4S
0:1.16.1-4.el8_6
fixed
RHEL 8.6 TUS
0:1.16.1-4.el8_6
fixed
RHEL 8.8 E4S
0:1.16.1-5.el8_8
fixed
RHEL 8.8 TUS
0:1.16.1-5.el8_8
fixed
RHEL 9
0:1.22.12-5.el9_7
fixed
gstreamer1-plugins-good-gtk
RHEL 8
0:1.16.1-6.el8_10
fixed
RHEL 8.2 AUS
0:1.16.1-3.el8_2
fixed
RHEL 8.4 AUS
0:1.16.1-4.el8_4
fixed
RHEL 8.6 AUS
0:1.16.1-4.el8_6
fixed
RHEL 8.6 E4S
0:1.16.1-4.el8_6
fixed
RHEL 8.6 TUS
0:1.16.1-4.el8_6
fixed
RHEL 8.8 E4S
0:1.16.1-5.el8_8
fixed
RHEL 8.8 TUS
0:1.16.1-5.el8_8
fixed
RHEL 9
0:1.22.12-5.el9_7
fixed
gstreamer1-plugins-ugly-free
RHEL 9
0:1.22.12-4.el9_7
fixed
Amazon Linux logo
Amazon Linux Releases
Amazon Package
Release
gstreamer1-plugin-openh264
Amazon Linux 2023
0:1.24.10-1.amzn2023.0.5
fixed
gstreamer1-plugin-openh264-debuginfo
Amazon Linux 2023
0:1.24.10-1.amzn2023.0.5
fixed
gstreamer1-plugins-bad-free
Amazon Linux 2
0:1.18.4-5.amzn2.0.5
fixed
Amazon Linux 2023
0:1.24.10-1.amzn2023.0.5
fixed
gstreamer1-plugins-bad-free-debuginfo
Amazon Linux 2
0:1.18.4-5.amzn2.0.5
fixed
Amazon Linux 2023
0:1.24.10-1.amzn2023.0.5
fixed
gstreamer1-plugins-bad-free-debugsource
Amazon Linux 2023
0:1.24.10-1.amzn2023.0.5
fixed
gstreamer1-plugins-bad-free-devel
Amazon Linux 2
0:1.18.4-5.amzn2.0.5
fixed
Amazon Linux 2023
0:1.24.10-1.amzn2023.0.5
fixed
gstreamer1-plugins-bad-free-libs
Amazon Linux 2023
0:1.24.10-1.amzn2023.0.5
fixed
gstreamer1-plugins-bad-free-libs-debuginfo
Amazon Linux 2023
0:1.24.10-1.amzn2023.0.5
fixed
Common Weakness Enumeration
References
https://gitlab.freedesktop.org/gstreamer/gstreamer/-/commit/7d3c258ed928cf59d126c8ea926b185f046f444c
https://www.zerodayinitiative.com/advisories/ZDI-26-163/