ZDI-26-167
HIGH 8.8
Published
Mar 06, 2026
GStreamer rtpqdm2depay Heap-based Buffer Overflow Remote Code Execution Vulnerability
GStreamer
GStreamer contains a high-severity remote code execution vulnerability (CVE-2026-3085, CVSS 8.8) that allows attackers to execute arbitrary code when the library is actively used in an application. Security teams should prioritize patching GStreamer installations across their infrastructure and identify all applications that depend on this multimedia library to assess exposure risk.