Alerts This Week
Warning Icon 1 1,102
Alerts This Week
Warning Icon 1 1,102

Ubuntu GStreamer Base Plugins Critical DoS Code Exec Vuln USN-8130-2

ubuntu
Calendar Grey June 3, 2026
Dist Ubuntu Esm H88
Ubuntu GStreamer Base Plugins update prevents crashes or remote attacks through malformed files. Ensure system is updated.
GStreamer Base Plugins could be made to crash or run programs if it opened a specially crafted file.

Summary

GStreamer Base Plugins could be made to crash or run programs if it opened

a specially crafted file.

Software Description:

- gst-plugins-base1.0: GStreamer plugins

Details:

USN-8130-1 fixed a vulnerability in GStreamer Base Plugins. This update

provides the corresponding update for Ubuntu 18.04 LTS and Ubuntu

20.04 LTS.

Original advisory details:

It was discovered that GStreamer Base Plugins incorrectly handled certain

AVI media files. A remote attacker could use this issue to cause GStreamer

Base Plugins to crash, resulting in a denial of service, or possibly

execute arbitrary code.

Topics%20covered

Topics Covered

security advisory denial of service critical arbitrary code execution Ubuntu GStreamer

Update Instructions

The problem can be corrected by updating your system to the following
package versions:

Ubuntu 20.04 LTS
  gstreamer1.0-plugins-base       1.16.3-0ubuntu1.4+esm2
                                  Available with Ubuntu Pro

Ubuntu 18.04 LTS
  gstreamer1.0-plugins-base       1.14.5-0ubuntu1~18.04.3+esm3
                                  Available with Ubuntu Pro

In general, a standard system update will make all the necessary changes.

References

https://ubuntu.com/security/notices/USN-8130-2

https://ubuntu.com/security/notices/USN-8130-1

CVE-2026-2921

Severity
critical
Lowest
Low
Medium
High
Critical

Ubuntu Security Notice USN-8130-2

Topics%20covered

Topics Covered

security advisory denial of service critical arbitrary code execution Ubuntu GStreamer

Package Information

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Your message here