GStreamer Stack-Based Buffer Overflow Vulnerability in Media Processing
CVE-2026-5056

7.8HIGH

Key Information:

Vendor

Gstreamer

Status
Gstreamer
Vendor
CVE Published:
29 July 2026

What is CVE-2026-5056?

A vulnerability exists in GStreamer due to improper validation of user-supplied data when parsing UncompressedFrameConfigBox structures. This flaw could allow remote attackers to exploit the vulnerability and execute arbitrary code within the context of the affected process. To mitigate risks, it is essential for users to update to the latest version, ensuring all security patches are applied.

Affected Version(s)

GStreamer a303670510771b993867ddf62bff3bce0cb988c3

References

https://www.zerodayinitiative.com/advisories/ZDI-26-283/
x_research-advisory
https://gitlab.freedesktop.org/api/v4/projects/gstreamer%...
vendor-advisory

CVSS V3.0

Score:
7.8
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.