DEBIAN-CVE-2026-125041: Medium severity debian/gst-plugins-good1.0 vulnerability

Q: What level of access and interaction does exploitation require?

The attack vector is local, so an attacker must be able to run code or otherwise operate on the affected system locally. No privileges are required, but user interaction is required.

Q: What is the expected security impact if exploitation succeeds?

The reported impact is limited to availability. Confidentiality and integrity are not reported as affected, while availability impact is rated high.

Published Nov 9, 2026

Updated

Affected Software

3 affected componentsFixes available

debian/gst-plugins-good1.0*

debian/gst-plugins-good1.0<1.28.3-1

1.28.3-1

Remediation

Recommended actions to resolve this vulnerability, in priority order.

Upgrade
Upgrade debian/gst-plugins-good1.0 to a version that resolves this vulnerability.
Fixed in 1.28.3-1

Event History

Nov 9, 2026

CVE Published

via OSV·07:16 PM

Data Sourced

via OSV·07:16 PM

DescriptionSeverityAffected Software

Frequently Asked Questions

What level of access and interaction does exploitation require?

The attack vector is local, so an attacker must be able to run code or otherwise operate on the affected system locally. No privileges are required, but user interaction is required.

What is the expected security impact if exploitation succeeds?