MGASA-2026-0222: gstreamer1.0-plugins-bad Mageia

CVSS: UnknownPublished
Published 18-06-2026Last modified 18-06-2026
Open JSON

Vulnerability summary

MGASA-2026-0222 is a vulnerability in gstreamer1.0-plugins-bad Mageia with no CVSS score yet.

Overall risk
0/100
0100
Minimal · default modelHow is this calculated?
CVSS score
Not scored
010
No CVSS score recorded
EPSS score
Not scored
0%100%
No EPSS score yet
KEVNot listedIn no KEV catalog
RansomwareNone recordedNo known use recorded
Public exploits0No public exploits recorded

Advisory lineage

Upstream 8 · Downstream 0
CVE-2026-1940CVE-2026-2920CVE-2026-2921CVE-2026-2922CVE-2026-2923CVE-2026-3082

Timeline

  1. 18-06-2026
    PublishedVulnerability first disclosed.
  2. 18-06-2026
    Last modifiedVulnerability information updated.

Description

Updated gstreamer1.0-plugins-bad, gstreamer1.0-plugins-base, gstreamer1.0-plugins-good & gstreamer1.0-plugins-ugly packages fix security vulnerabilities CVE-2026-2921, GStreamer RIFF Palette Integer Overflow Remote Code Execution Vulnerability CVE-2026-2923.GStreamer DVB Subtitles Out-Of-Bounds Write Remote Code Execution Vulnerability CVE-2026-3082, GStreamer JPEG Parser Heap-based Buffer Overflow Remote Code Execution Vulnerability CVE-2026-3085, GStreamer rtpqdm2depay Heap-based Buffer Overflow Remote Code Execution Vulnerability CVE-2026-2920, GStreamer ASF Demuxer Heap-based Buffer Overflow Remote Code Execution Vulnerability CVE-2026-2922, GStreamer ASF Demuxer Heap-based Buffer Overflow Remote Code Execution Vulnerability CVE-2026-1940, Gstreamer: incomplete fix of CVE-2026-1940

CVSS metrics

Risk metrics not yet published.

EPSS trend

No EPSS score has been published for this record yet.

Known exploited

Compare KEV catalogs

Not in any of the 3 tracked catalogs.

Public exploits

0 found

No public exploits indexed.

Weaknesses

CWE · root cause

No weakness data has been published for this record.

Affected systems

Mageia4 products
  • gstreamer1.0-plugins-bad< 1.22.11-1.2.mga9 | < 1.22.11-1.2.mga9.tainted
  • gstreamer1.0-plugins-base< 1.22.11-1.3.mga9
  • gstreamer1.0-plugins-good< 1.22.11-1.2.mga9
  • gstreamer1.0-plugins-ugly< 1.22.11-1.1.mga9 | < 1.22.11-1.1.mga9.tainted

1 vendor · 4 products

References

4 links