{
  "threat_severity" : "Important",
  "public_date" : "2026-03-13T20:39:01Z",
  "bugzilla" : {
    "description" : "GStreamer: GStreamer: Remote Code Execution via out-of-bounds write in DVB Subtitles handling",
    "id" : "2447503",
    "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=2447503"
  },
  "cvss3" : {
    "cvss3_base_score" : "7.8",
    "cvss3_scoring_vector" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
    "status" : "verified"
  },
  "cwe" : "CWE-787",
  "details" : [ "GStreamer DVB Subtitles Out-Of-Bounds Write Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of GStreamer. Interaction with this library is required to exploit this vulnerability but attack vectors may vary depending on the implementation.\nThe specific flaw exists within the handling of coordinates. The issue results from the lack of proper validation of user-supplied data, which can result in a write past the end of an allocated buffer. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-28838.", "A flaw was found in GStreamer. This out-of-bounds write vulnerability in the DVB (Digital Video Broadcasting) Subtitles handling allows remote attackers to execute arbitrary code. The issue stems from improper validation of user-supplied coordinate data, which can lead to writing beyond the boundaries of an allocated memory buffer. Successful exploitation can result in arbitrary code execution within the context of the current process." ],
  "statement" : "IMPORTANT: A vulnerability in GStreamer's DVB subtitles component allows remote code execution due to an out-of-bounds write caused by improper validation of user-supplied data. This affects Red Hat Enterprise Linux versions that include GStreamer. Exploitation requires interaction with the GStreamer library, typically through processing malicious DVB subtitle streams.",
  "affected_release" : [ {
    "product_name" : "Red Hat Enterprise Linux 10",
    "release_date" : "2026-03-31T00:00:00Z",
    "advisory" : "RHSA-2026:6259",
    "cpe" : "cpe:/o:redhat:enterprise_linux:10.1",
    "package" : "gstreamer1-plugins-bad-free-0:1.24.11-3.el10_1"
  }, {
    "product_name" : "Red Hat Enterprise Linux 10",
    "release_date" : "2026-03-31T00:00:00Z",
    "advisory" : "RHSA-2026:6259",
    "cpe" : "cpe:/o:redhat:enterprise_linux:10.1",
    "package" : "gstreamer1-plugins-base-0:1.24.11-2.el10_1"
  }, {
    "product_name" : "Red Hat Enterprise Linux 10",
    "release_date" : "2026-03-31T00:00:00Z",
    "advisory" : "RHSA-2026:6259",
    "cpe" : "cpe:/o:redhat:enterprise_linux:10.1",
    "package" : "gstreamer1-plugins-good-0:1.24.11-2.el10_1"
  }, {
    "product_name" : "Red Hat Enterprise Linux 10",
    "release_date" : "2026-03-31T00:00:00Z",
    "advisory" : "RHSA-2026:6259",
    "cpe" : "cpe:/o:redhat:enterprise_linux:10.1",
    "package" : "gstreamer1-plugins-ugly-free-0:1.24.11-2.el10_1"
  }, {
    "product_name" : "Red Hat Enterprise Linux 10.0 Extended Update Support",
    "release_date" : "2026-04-20T00:00:00Z",
    "advisory" : "RHSA-2026:8854",
    "cpe" : "cpe:/o:redhat:enterprise_linux_eus:10.0",
    "package" : "gstreamer1-plugins-bad-free-0:1.24.11-3.el10_0"
  }, {
    "product_name" : "Red Hat Enterprise Linux 10.0 Extended Update Support",
    "release_date" : "2026-04-20T00:00:00Z",
    "advisory" : "RHSA-2026:8854",
    "cpe" : "cpe:/o:redhat:enterprise_linux_eus:10.0",
    "package" : "gstreamer1-plugins-base-0:1.24.11-1.el10_0.1"
  }, {
    "product_name" : "Red Hat Enterprise Linux 10.0 Extended Update Support",
    "release_date" : "2026-04-20T00:00:00Z",
    "advisory" : "RHSA-2026:8854",
    "cpe" : "cpe:/o:redhat:enterprise_linux_eus:10.0",
    "package" : "gstreamer1-plugins-good-0:1.24.11-1.el10_0.2"
  }, {
    "product_name" : "Red Hat Enterprise Linux 10.0 Extended Update Support",
    "release_date" : "2026-04-20T00:00:00Z",
    "advisory" : "RHSA-2026:8854",
    "cpe" : "cpe:/o:redhat:enterprise_linux_eus:10.0",
    "package" : "gstreamer1-plugins-ugly-free-0:1.24.11-1.el10_0.1"
  }, {
    "product_name" : "Red Hat Enterprise Linux 8",
    "release_date" : "2026-04-07T00:00:00Z",
    "advisory" : "RHSA-2026:6750",
    "cpe" : "cpe:/a:redhat:enterprise_linux:8",
    "package" : "gstreamer1-plugins-bad-free-0:1.16.1-6.el8_10"
  }, {
    "product_name" : "Red Hat Enterprise Linux 8",
    "release_date" : "2026-04-07T00:00:00Z",
    "advisory" : "RHSA-2026:6750",
    "cpe" : "cpe:/a:redhat:enterprise_linux:8",
    "package" : "gstreamer1-plugins-base-0:1.16.1-6.el8_10"
  }, {
    "product_name" : "Red Hat Enterprise Linux 8",
    "release_date" : "2026-04-07T00:00:00Z",
    "advisory" : "RHSA-2026:6750",
    "cpe" : "cpe:/a:redhat:enterprise_linux:8",
    "package" : "gstreamer1-plugins-good-0:1.16.1-6.el8_10"
  }, {
    "product_name" : "Red Hat Enterprise Linux 9",
    "release_date" : "2026-03-31T00:00:00Z",
    "advisory" : "RHSA-2026:6300",
    "cpe" : "cpe:/a:redhat:enterprise_linux:9",
    "package" : "gstreamer1-plugins-bad-free-0:1.22.12-5.el9_7"
  }, {
    "product_name" : "Red Hat Enterprise Linux 9",
    "release_date" : "2026-03-31T00:00:00Z",
    "advisory" : "RHSA-2026:6300",
    "cpe" : "cpe:/a:redhat:enterprise_linux:9",
    "package" : "gstreamer1-plugins-base-0:1.22.12-5.el9_7"
  }, {
    "product_name" : "Red Hat Enterprise Linux 9",
    "release_date" : "2026-03-31T00:00:00Z",
    "advisory" : "RHSA-2026:6300",
    "cpe" : "cpe:/a:redhat:enterprise_linux:9",
    "package" : "gstreamer1-plugins-good-0:1.22.12-5.el9_7"
  }, {
    "product_name" : "Red Hat Enterprise Linux 9",
    "release_date" : "2026-03-31T00:00:00Z",
    "advisory" : "RHSA-2026:6300",
    "cpe" : "cpe:/a:redhat:enterprise_linux:9",
    "package" : "gstreamer1-plugins-ugly-free-0:1.22.12-4.el9_7"
  }, {
    "product_name" : "Red Hat Enterprise Linux 9.6 Extended Update Support",
    "release_date" : "2026-04-20T00:00:00Z",
    "advisory" : "RHSA-2026:8862",
    "cpe" : "cpe:/a:redhat:rhel_eus:9.6",
    "package" : "gstreamer1-plugins-bad-free-0:1.22.12-5.el9_6"
  }, {
    "product_name" : "Red Hat Enterprise Linux 9.6 Extended Update Support",
    "release_date" : "2026-04-20T00:00:00Z",
    "advisory" : "RHSA-2026:8862",
    "cpe" : "cpe:/a:redhat:rhel_eus:9.6",
    "package" : "gstreamer1-plugins-base-0:1.22.12-5.el9_6"
  }, {
    "product_name" : "Red Hat Enterprise Linux 9.6 Extended Update Support",
    "release_date" : "2026-04-20T00:00:00Z",
    "advisory" : "RHSA-2026:8862",
    "cpe" : "cpe:/a:redhat:rhel_eus:9.6",
    "package" : "gstreamer1-plugins-good-0:1.22.12-5.el9_6"
  }, {
    "product_name" : "Red Hat Enterprise Linux 9.6 Extended Update Support",
    "release_date" : "2026-04-20T00:00:00Z",
    "advisory" : "RHSA-2026:8862",
    "cpe" : "cpe:/a:redhat:rhel_eus:9.6",
    "package" : "gstreamer1-plugins-ugly-free-0:1.22.12-4.el9_6"
  } ],
  "package_state" : [ {
    "product_name" : "Red Hat Enterprise Linux 6",
    "fix_state" : "Not affected",
    "package_name" : "gstreamer",
    "cpe" : "cpe:/o:redhat:enterprise_linux:6"
  }, {
    "product_name" : "Red Hat Enterprise Linux 7",
    "fix_state" : "Not affected",
    "package_name" : "gstreamer",
    "cpe" : "cpe:/o:redhat:enterprise_linux:7"
  }, {
    "product_name" : "Red Hat Enterprise Linux 7",
    "fix_state" : "Not affected",
    "package_name" : "gstreamer1",
    "cpe" : "cpe:/o:redhat:enterprise_linux:7"
  }, {
    "product_name" : "Red Hat Enterprise Linux 8",
    "fix_state" : "Not affected",
    "package_name" : "mingw-gstreamer1",
    "cpe" : "cpe:/o:redhat:enterprise_linux:8"
  } ],
  "references" : [ "https://www.cve.org/CVERecord?id=CVE-2026-2923\nhttps://nvd.nist.gov/vuln/detail/CVE-2026-2923\nhttps://gitlab.freedesktop.org/gstreamer/gstreamer/-/commit/3b8253f447bcc9831dbf643d2c69b205fedbe086\nhttps://www.zerodayinitiative.com/advisories/ZDI-26-161/" ],
  "name" : "CVE-2026-2923",
  "mitigation" : {
    "value" : "To mitigate this issue, avoid processing untrusted DVB subtitle streams with GStreamer. Limiting exposure to untrusted content can reduce the risk of exploitation.",
    "lang" : "en:us"
  },
  "csaw" : false
}