The GStreamer project reports:
Multiple security issues were identified and fixed in the GStreamer framework.
- GStreamer-SA-2026-0078: Type confusion crash in GValue list comparison when parsing caps
- GStreamer-SA-2026-0083: Out-of-bounds read and write in GStreamer video meta deserialization
- GStreamer-SA-2026-0084: Out-of-bounds read in the RTSP KeyMgmt header parser
- GStreamer-SA-2026-0085: Stack-based out-of-bounds write in closed caption converter and combiner
- GStreamer-SA-2026-0086: Out-of-bounds read in H.265 RTP depayloader when processing short packets
- GStreamer-SA-2026-0087: Excessive memory allocation in the ASF demuxer
- GStreamer-SA-2026-0088: Heap out-of-bounds write in RTP L8/L16/L24 audio depayloaders
- GStreamer-SA-2026-0089: Integer overflow and out-of-bounds read in Matroska demuxer Xiph codec data parser
- GStreamer-SA-2026-0090: Arbitrary element instantiation in GStreamer Editing Services project file loader
- GStreamer-SA-2026-0091: Out-of-bounds read in RTCP SDES privately defined entry handling
- GStreamer-SA-2026-0092: Out-of-bounds read in SVG image decoder