CVE-2026-2921: GStreamer RIFF Palette Integer Overflow Remote Code Execution Vulnerability
GStreamer RIFF Palette Integer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of GStreamer. Interaction with this library is required to exploit this vulnerability but attack vectors may vary depending on the implementation.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
debian/gst-plugins-base1.0to a version that resolves this vulnerability.Fixed in 1.18.4-2+deb11u5Fixed in 1.22.0-3+deb12u6Fixed in 1.26.2-1+deb13u1Fixed in 1.28.3-1Fixed in 1.28.4-1
Event History
Frequently Asked Questions
What is the severity of CVE-2026-2921?
CVE-2026-2921 is classified as a critical severity vulnerability due to its potential for remote code execution.
How can I fix CVE-2026-2921?
To fix CVE-2026-2921, it is recommended to upgrade to the latest version of GStreamer that addresses this vulnerability.
What are the potential impacts of CVE-2026-2921?
The potential impacts of CVE-2026-2921 include unauthorized remote code execution, leading to system compromise.
Who is affected by CVE-2026-2921?
All installations of GStreamer that utilize the affected versions are vulnerable to CVE-2026-2921.
What actions should be taken if CVE-2026-2921 is detected?
If CVE-2026-2921 is detected, organizations should immediately apply patches and updates to mitigate the risk.