DEBIAN-CVE-2026-86476

See a problem?
Please try reporting it to the source first.

Source

https://security-tracker.debian.org/tracker/CVE-2026-86476

Import Source

https://storage.googleapis.com/debian-osv/debian-cve-osv/DEBIAN-CVE-2026-86476.json

JSON Data

https://api.osv.dev/v1/vulns/DEBIAN-CVE-2026-86476

Upstream

CVE-2026-86476

Published

2026-10-14T10:17:56Z

Modified

2026-10-15T10:03:23Z

Severity

8.4 (High) CVSS_V3 - CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H CVSS Calculator

Summary

[none]

Details

A flaw was found in gst-plugins-base. A heap buffer overflow can be triggered when processing video buffers whose attached GstVideoMeta metadata declares plane strides and offsets that exceed the actual backing memory allocation. The metadata is not range-checked during deserialization, and the video frame mapping code does not verify that the declared plane geometry fits within the buffer before allowing consumers to read or write video data. A local attacker who controls the sending side of a GStreamer inter-process IPC pipeline can deliver a crafted buffer carrying fabricated strides, causing the receiving process to read or write beyond heap boundaries. Successful exploitation can cause a denial of service or potentially allow code execution within the affected process.

References

https://security-tracker.debian.org/tracker/CVE-2026-86476

Affected packages

Debian:12 / gst-plugins-base1.0

Package

Name: gst-plugins-base1.0
Purl: pkg:deb/debian/gst-plugins-base1.0?arch=source&distro=bookworm

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Affected versions

1.*

1.22.0-3

1.22.0-3+deb12u1

1.22.0-3+deb12u2

1.22.0-3+deb12u3

1.22.0-3+deb12u4

1.22.0-3+deb12u5

1.22.0-3+deb12u6

1.22.0-3+deb12u7

1.22.1-1

1.22.2-1

1.22.3-1

1.22.3-2

1.22.4-1

1.22.5-1

1.22.6-1

1.22.7-1

1.22.8-1

1.22.9-1

1.22.10-1

1.23.1-1

1.23.1-2

1.23.2-1

1.23.2-2

1.23.90-1

1.24.0-1

1.24.0-2

1.24.1-1

1.24.2-1

1.24.3-1

1.24.4-1

1.24.4-1+hurd.1

1.24.5-1

1.24.6-1

1.24.7-1

1.24.7-2

1.24.7-3

1.24.7-4

1.24.8-1

1.24.9-1

1.24.10-1

1.24.11-1

1.24.11-2

1.24.11-3

1.24.12-1

1.25.1-1

1.25.1-2

1.25.1-3

1.25.1-4

1.25.1-5

1.25.50-1

1.25.90-1

1.25.90-2

1.26.0-1

1.26.1-1

1.26.2-1

1.26.3-1

1.26.4-1

1.26.5-1

1.26.5-2

1.26.6-1

1.26.6-2

1.26.6-3

1.26.7-1

1.26.8-1

1.26.9-1

1.26.10-1

1.27.1-1

1.27.2-1

1.27.2-2

1.27.2-3

1.27.50-1

1.27.50-2

1.27.90-1

1.28.0-1

1.28.1-1

1.28.2-1

1.28.2-2

1.28.3-1

1.28.4-1

1.28.5-1

1.28.6-1

1.28.6-2

1.28.7-1

1.28.8-1

1.29.1-1

1.29.1-2

1.29.1-3

1.29.2-1

Ecosystem specific

{
    "urgency":  "not yet assigned"
}

Database specific

source

"https://storage.googleapis.com/debian-osv/debian-cve-osv/DEBIAN-CVE-2026-86476.json"

Debian:13 / gst-plugins-base1.0

Package

Name: gst-plugins-base1.0
Purl: pkg:deb/debian/gst-plugins-base1.0?arch=source&distro=trixie

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Affected versions

1.*

1.26.2-1

1.26.2-1+deb13u1

1.26.2-1+deb13u2

1.26.3-1

1.26.4-1

1.26.5-1

1.26.5-2

1.26.6-1

1.26.6-2

1.26.6-3

1.26.7-1

1.26.8-1

1.26.9-1

1.26.10-1

1.27.1-1

1.27.2-1

1.27.2-2

1.27.2-3

1.27.50-1

1.27.50-2

1.27.90-1

1.28.0-1

1.28.1-1

1.28.2-1

1.28.2-2

1.28.3-1

1.28.4-1

1.28.5-1

1.28.6-1

1.28.6-2

1.28.7-1

1.28.8-1

1.29.1-1

1.29.1-2

1.29.1-3

1.29.2-1

Ecosystem specific

{
    "urgency":  "not yet assigned"
}

Database specific

source

"https://storage.googleapis.com/debian-osv/debian-cve-osv/DEBIAN-CVE-2026-86476.json"

Debian:14 / gst-plugins-base1.0

Package

Name: gst-plugins-base1.0
Purl: pkg:deb/debian/gst-plugins-base1.0?arch=source&distro=forky

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Affected versions

1.*

1.26.2-1

1.26.3-1

1.26.4-1

1.26.5-1

1.26.5-2

1.26.6-1

1.26.6-2

1.26.6-3

1.26.7-1

1.26.8-1

1.26.9-1

1.26.10-1

1.27.1-1

1.27.2-1

1.27.2-2

1.27.2-3

1.27.50-1

1.27.50-2

1.27.90-1

1.28.0-1

1.28.1-1

1.28.2-1

1.28.2-2

1.28.3-1

1.28.4-1

1.28.5-1

1.28.6-1

1.28.6-2

1.28.7-1

1.28.8-1

1.29.1-1

1.29.1-2

1.29.1-3

1.29.2-1

Ecosystem specific

{
    "urgency":  "not yet assigned"
}

Database specific

source

"https://storage.googleapis.com/debian-osv/debian-cve-osv/DEBIAN-CVE-2026-86476.json"