ZDI-26-161 HIGH 7.8 Published Mar 06, 2026

GStreamer DVB Subtitles Out-Of-Bounds Write Remote Code Execution Vulnerability

GStreamer

GStreamer contains a remote code execution vulnerability (CVE-2026-2923) with a CVSS score of 7.8 that allows attackers to execute arbitrary code on affected systems. An attacker must interact with the library to exploit this flaw, though the specific attack vectors depend on how individual applications implement GStreamer. Security teams should prioritize patching GStreamer installations and review applications that depend on this library to assess their exposure risk.

Related CVEs

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy