ZDI-26-166 HIGH 8.8 Published Mar 06, 2026

GStreamer rtpqdm2depay Out-Of-Bounds Write Remote Code Execution Vulnerability

GStreamer

GStreamer contains a critical remote code execution vulnerability (CVE-2026-3083) rated 8.8 CVSS that allows attackers to execute arbitrary code on affected systems when the library is utilized. Attackers can leverage this flaw through various attack vectors depending on how GStreamer is integrated into applications, requiring only interaction with the vulnerable library to succeed. Security teams should immediately patch GStreamer installations, inventory all applications and systems using this library, and prioritize remediation efforts given the high severity rating and remote exploitability.

Related CVEs

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy