ZDI-26-161
HIGH 7.8
Published
Mar 06, 2026
GStreamer DVB Subtitles Out-Of-Bounds Write Remote Code Execution Vulnerability
GStreamer
GStreamer contains a remote code execution vulnerability (CVE-2026-2923) with a CVSS score of 7.8 that allows attackers to execute arbitrary code on affected systems. An attacker must interact with the library to exploit this flaw, though the specific attack vectors depend on how individual applications implement GStreamer. Security teams should prioritize patching GStreamer installations and review applications that depend on this library to assess their exposure risk.