DEBIAN-CVE-2026-125040: Medium severity debian/gst-plugins-base1.0 vulnerability

Q: What does an attacker need to exploit this issue?

The issue is remotely reachable over the network, has low attack complexity, and does not require attacker privileges. Exploitation requires user interaction.

Q: What is the expected security impact?

The reported impact is high availability impact, with no reported confidentiality or integrity impact.

Published Nov 9, 2026

Updated

Affected Software

3 affected componentsFixes available

debian/gst-plugins-base1.0*

debian/gst-plugins-base1.0<1.28.2-1

1.28.2-1

Remediation

Recommended actions to resolve this vulnerability, in priority order.

Upgrade
Upgrade debian/gst-plugins-base1.0 to a version that resolves this vulnerability.
Fixed in 1.28.2-1

Event History

Nov 9, 2026

CVE Published

via OSV·07:16 PM

Data Sourced

via OSV·07:16 PM

DescriptionSeverityAffected Software

Frequently Asked Questions

What does an attacker need to exploit this issue?

The issue is remotely reachable over the network, has low attack complexity, and does not require attacker privileges. Exploitation requires user interaction.

What is the expected security impact?