Skip to main content
ZDI-26-464 HIGH 7.8 Published Jul 29, 2026

GStreamer MRF File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability

GStreamer

This vulnerability allows remote attackers to execute arbitrary code on affected installations of GStreamer. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The ZDI has assigned a CVSS rating of 7.8.

Related CVE

CVE-2026-18296

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy