Explore top 10 tips to secure your open-source projects now. Read More

×
Alerts This Week
Warning Icon 1 531
Alerts This Week
Warning Icon 1 531

Ubuntu 26.04 LTS GStreamer Bad Plugins Moderate DoS Vuln 2026-53701

ubuntu
Calendar Grey June 17, 2026
Scroller Ubuntu Esm H88
Several security issues in GStreamer Bad Plugins could lead to denial of service or arbitrary code execution.
Several security issues were fixed in GStreamer Bad Plugins.

Summary

Several security issues were fixed in GStreamer Bad Plugins.

Software Description:

- gst-plugins-bad1.0: GStreamer plugins

Details:

It was discovered that GStreamer Bad Plugins incorrectly handled parsing

H.266/VVC picture partition data. An attacker could use this issue to cause

GStreamer Bad Plugins to crash, resulting in a denial of service, or

possibly execute arbitrary code. (CVE-2026-53701)

It was discovered that GStreamer Bad Plugins incorrectly handled parsing

H.265 buffering period metadata. An attacker could use this issue to cause

GStreamer Bad Plugins to crash, resulting in a denial of service, or

possibly execute arbitrary code. (CVE-2026-53702)

Topics%20covered

Topics Covered

security advisory moderate denial of service Ubuntu arbitrary code GStreamer

Update Instructions

The problem can be corrected by updating your system to the following
package versions:

Ubuntu 26.04 LTS
  gstreamer1.0-plugins-bad        1.28.2-1ubuntu1.1
  libgstreamer-plugins-bad1.0-0   1.28.2-1ubuntu1.1

In general, a standard system update will make all the necessary changes.

References

https://ubuntu.com/security/notices/USN-8446-1

CVE-2026-53701, CVE-2026-53702

Severity
important
Lowest
Low
Medium
High
Critical

Ubuntu Security Notice USN-8446-1

Topics%20covered

Topics Covered

security advisory moderate denial of service Ubuntu arbitrary code GStreamer

Package Information

https://launchpad.net/ubuntu/+source/gst-plugins-bad1.0/1.28.2-1ubuntu1.1

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.