ZDI-CAN-29392 HIGH 7.8 Upcoming Mar 12, 2026

GStreamer

GStreamer is a widely-used open-source multimedia framework used for audio and video processing across many applications and operating systems. This vulnerability has a high CVSS score of 7.8 and can be exploited locally without authentication or special privileges, requiring only user interaction to trigger, with potential for high impact across confidentiality, integrity, and availability. Security teams should monitor for patches from GStreamer and applications that depend on it, as exploitation could allow local attackers to compromise systems through malicious media files or content.

Advisory Details
Researcher DongHyeon Hwang (kind_killerwhale)
Reported March 12, 2026
Deadline July 10, 2026 85d
CVSS Vector AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy