Staging Environment: Content and features may be unstable or change without notice.
Search for packages
Package details: pkg:rpm/redhat/gstreamer1-plugins-base@1.22.1-4?arch=el9_4
purl pkg:rpm/redhat/gstreamer1-plugins-base@1.22.1-4?arch=el9_4
Next non-vulnerable version None.
Latest non-vulnerable version None.
Risk 4.0
Vulnerabilities affecting this package (4)
Vulnerability Summary Fixed by
VCID-4ka2-hbcv-8uh2
Aliases:
CVE-2026-3085
GStreamer: GStreamer: Remote Code Execution via Heap-based Buffer Overflow in rtpqdm2depay There are no reported fixed by versions.
VCID-a2rd-ntzd-2kdr
Aliases:
CVE-2026-2921
GStreamer: GStreamer: Arbitrary code execution via RIFF palette integer overflow in AVI file handling There are no reported fixed by versions.
VCID-q56p-kvy2-23af
Aliases:
CVE-2026-3082
GStreamer: GStreamer: Remote Code Execution via heap-based buffer overflow in JPEG parser There are no reported fixed by versions.
VCID-upbh-pvqc-4ubn
Aliases:
CVE-2026-3083
GStreamer: GStreamer: Remote Code Execution via Out-Of-Bounds Write in rtpqdm2depay There are no reported fixed by versions.
Vulnerabilities fixed by this package (0)
Vulnerability Summary Aliases
This package is not known to fix vulnerabilities.

Date Actor Action Vulnerability Source VulnerableCode Version
2026-04-21T22:38:42.903260+00:00 RedHat Importer Affected by VCID-q56p-kvy2-23af https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2026-3082.json 38.4.0
2026-04-21T22:38:42.122791+00:00 RedHat Importer Affected by VCID-4ka2-hbcv-8uh2 https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2026-3085.json 38.4.0
2026-04-21T22:38:41.337607+00:00 RedHat Importer Affected by VCID-upbh-pvqc-4ubn https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2026-3083.json 38.4.0
2026-04-21T22:38:40.540023+00:00 RedHat Importer Affected by VCID-a2rd-ntzd-2kdr https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2026-2921.json 38.4.0