ZDI-26-167 HIGH 8.8 Published Mar 06, 2026

GStreamer rtpqdm2depay Heap-based Buffer Overflow Remote Code Execution Vulnerability

GStreamer

GStreamer contains a high-severity remote code execution vulnerability (CVE-2026-3085, CVSS 8.8) that allows attackers to execute arbitrary code when the library is actively used in an application. Security teams should prioritize patching GStreamer installations across their infrastructure and identify all applications that depend on this multimedia library to assess exposure risk.

Related CVEs

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy