Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

suse-cvrf логотип

SUSE-SU-2026:2743-1

Опубликовано: 03 июл. 2026
Источник: suse-cvrf

Описание

Security update for gstreamer-plugins-bad

This update for gstreamer-plugins-bad fixes the following issue

  • CVE-2026-52719: gstreamer1-plugins-bad-free: GStreamer: Out-of-bounds read via JPEG segment length validation in VA decoder (bsc#1268401).

Список пакетов

SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS
gstreamer-plugins-bad-1.22.0-150500.3.31.1
gstreamer-plugins-bad-chromaprint-1.22.0-150500.3.31.1
gstreamer-plugins-bad-devel-1.22.0-150500.3.31.1
gstreamer-plugins-bad-lang-1.22.0-150500.3.31.1
libgstadaptivedemux-1_0-0-1.22.0-150500.3.31.1
libgstbadaudio-1_0-0-1.22.0-150500.3.31.1
libgstbasecamerabinsrc-1_0-0-1.22.0-150500.3.31.1
libgstcodecparsers-1_0-0-1.22.0-150500.3.31.1
libgstcodecs-1_0-0-1.22.0-150500.3.31.1
libgstcuda-1_0-0-1.22.0-150500.3.31.1
libgstinsertbin-1_0-0-1.22.0-150500.3.31.1
libgstisoff-1_0-0-1.22.0-150500.3.31.1
libgstmpegts-1_0-0-1.22.0-150500.3.31.1
libgstphotography-1_0-0-1.22.0-150500.3.31.1
libgstplay-1_0-0-1.22.0-150500.3.31.1
libgstplayer-1_0-0-1.22.0-150500.3.31.1
libgstsctp-1_0-0-1.22.0-150500.3.31.1
libgsttranscoder-1_0-0-1.22.0-150500.3.31.1
libgsturidownloader-1_0-0-1.22.0-150500.3.31.1
libgstva-1_0-0-1.22.0-150500.3.31.1
libgstvulkan-1_0-0-1.22.0-150500.3.31.1
libgstwayland-1_0-0-1.22.0-150500.3.31.1
libgstwebrtc-1_0-0-1.22.0-150500.3.31.1
libgstwebrtcnice-1_0-0-1.22.0-150500.3.31.1
typelib-1_0-CudaGst-1_0-1.22.0-150500.3.31.1
typelib-1_0-GstBadAudio-1_0-1.22.0-150500.3.31.1
typelib-1_0-GstCodecs-1_0-1.22.0-150500.3.31.1
typelib-1_0-GstCuda-1_0-1.22.0-150500.3.31.1
typelib-1_0-GstInsertBin-1_0-1.22.0-150500.3.31.1
typelib-1_0-GstMpegts-1_0-1.22.0-150500.3.31.1
typelib-1_0-GstPlay-1_0-1.22.0-150500.3.31.1
typelib-1_0-GstPlayer-1_0-1.22.0-150500.3.31.1
typelib-1_0-GstVa-1_0-1.22.0-150500.3.31.1
typelib-1_0-GstWebRTC-1_0-1.22.0-150500.3.31.1
SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS
gstreamer-plugins-bad-1.22.0-150500.3.31.1
gstreamer-plugins-bad-chromaprint-1.22.0-150500.3.31.1
gstreamer-plugins-bad-devel-1.22.0-150500.3.31.1
gstreamer-plugins-bad-lang-1.22.0-150500.3.31.1
libgstadaptivedemux-1_0-0-1.22.0-150500.3.31.1
libgstbadaudio-1_0-0-1.22.0-150500.3.31.1
libgstbasecamerabinsrc-1_0-0-1.22.0-150500.3.31.1
libgstcodecparsers-1_0-0-1.22.0-150500.3.31.1
libgstcodecs-1_0-0-1.22.0-150500.3.31.1
libgstcuda-1_0-0-1.22.0-150500.3.31.1
libgstinsertbin-1_0-0-1.22.0-150500.3.31.1
libgstisoff-1_0-0-1.22.0-150500.3.31.1
libgstmpegts-1_0-0-1.22.0-150500.3.31.1
libgstphotography-1_0-0-1.22.0-150500.3.31.1
libgstplay-1_0-0-1.22.0-150500.3.31.1
libgstplayer-1_0-0-1.22.0-150500.3.31.1
libgstsctp-1_0-0-1.22.0-150500.3.31.1
libgsttranscoder-1_0-0-1.22.0-150500.3.31.1
libgsturidownloader-1_0-0-1.22.0-150500.3.31.1
libgstva-1_0-0-1.22.0-150500.3.31.1
libgstvulkan-1_0-0-1.22.0-150500.3.31.1
libgstwayland-1_0-0-1.22.0-150500.3.31.1
libgstwebrtc-1_0-0-1.22.0-150500.3.31.1
libgstwebrtcnice-1_0-0-1.22.0-150500.3.31.1
typelib-1_0-CudaGst-1_0-1.22.0-150500.3.31.1
typelib-1_0-GstBadAudio-1_0-1.22.0-150500.3.31.1
typelib-1_0-GstCodecs-1_0-1.22.0-150500.3.31.1
typelib-1_0-GstCuda-1_0-1.22.0-150500.3.31.1
typelib-1_0-GstInsertBin-1_0-1.22.0-150500.3.31.1
typelib-1_0-GstMpegts-1_0-1.22.0-150500.3.31.1
typelib-1_0-GstPlay-1_0-1.22.0-150500.3.31.1
typelib-1_0-GstPlayer-1_0-1.22.0-150500.3.31.1
typelib-1_0-GstVa-1_0-1.22.0-150500.3.31.1
typelib-1_0-GstWebRTC-1_0-1.22.0-150500.3.31.1
SUSE Linux Enterprise Server 15 SP5-LTSS
gstreamer-plugins-bad-1.22.0-150500.3.31.1
gstreamer-plugins-bad-chromaprint-1.22.0-150500.3.31.1
gstreamer-plugins-bad-devel-1.22.0-150500.3.31.1
gstreamer-plugins-bad-lang-1.22.0-150500.3.31.1
libgstadaptivedemux-1_0-0-1.22.0-150500.3.31.1
libgstbadaudio-1_0-0-1.22.0-150500.3.31.1
libgstbasecamerabinsrc-1_0-0-1.22.0-150500.3.31.1
libgstcodecparsers-1_0-0-1.22.0-150500.3.31.1
libgstcodecs-1_0-0-1.22.0-150500.3.31.1
libgstcuda-1_0-0-1.22.0-150500.3.31.1
libgstinsertbin-1_0-0-1.22.0-150500.3.31.1
libgstisoff-1_0-0-1.22.0-150500.3.31.1
libgstmpegts-1_0-0-1.22.0-150500.3.31.1
libgstphotography-1_0-0-1.22.0-150500.3.31.1
libgstplay-1_0-0-1.22.0-150500.3.31.1
libgstplayer-1_0-0-1.22.0-150500.3.31.1
libgstsctp-1_0-0-1.22.0-150500.3.31.1
libgsttranscoder-1_0-0-1.22.0-150500.3.31.1
libgsturidownloader-1_0-0-1.22.0-150500.3.31.1
libgstva-1_0-0-1.22.0-150500.3.31.1
libgstvulkan-1_0-0-1.22.0-150500.3.31.1
libgstwayland-1_0-0-1.22.0-150500.3.31.1
libgstwebrtc-1_0-0-1.22.0-150500.3.31.1
libgstwebrtcnice-1_0-0-1.22.0-150500.3.31.1
typelib-1_0-CudaGst-1_0-1.22.0-150500.3.31.1
typelib-1_0-GstBadAudio-1_0-1.22.0-150500.3.31.1
typelib-1_0-GstCodecs-1_0-1.22.0-150500.3.31.1
typelib-1_0-GstCuda-1_0-1.22.0-150500.3.31.1
typelib-1_0-GstInsertBin-1_0-1.22.0-150500.3.31.1
typelib-1_0-GstMpegts-1_0-1.22.0-150500.3.31.1
typelib-1_0-GstPlay-1_0-1.22.0-150500.3.31.1
typelib-1_0-GstPlayer-1_0-1.22.0-150500.3.31.1
typelib-1_0-GstVa-1_0-1.22.0-150500.3.31.1
typelib-1_0-GstWebRTC-1_0-1.22.0-150500.3.31.1
SUSE Linux Enterprise Server for SAP Applications 15 SP5
gstreamer-plugins-bad-1.22.0-150500.3.31.1
gstreamer-plugins-bad-chromaprint-1.22.0-150500.3.31.1
gstreamer-plugins-bad-devel-1.22.0-150500.3.31.1
gstreamer-plugins-bad-lang-1.22.0-150500.3.31.1
libgstadaptivedemux-1_0-0-1.22.0-150500.3.31.1
libgstbadaudio-1_0-0-1.22.0-150500.3.31.1
libgstbasecamerabinsrc-1_0-0-1.22.0-150500.3.31.1
libgstcodecparsers-1_0-0-1.22.0-150500.3.31.1
libgstcodecs-1_0-0-1.22.0-150500.3.31.1
libgstcuda-1_0-0-1.22.0-150500.3.31.1
libgstinsertbin-1_0-0-1.22.0-150500.3.31.1
libgstisoff-1_0-0-1.22.0-150500.3.31.1
libgstmpegts-1_0-0-1.22.0-150500.3.31.1
libgstphotography-1_0-0-1.22.0-150500.3.31.1
libgstplay-1_0-0-1.22.0-150500.3.31.1
libgstplayer-1_0-0-1.22.0-150500.3.31.1
libgstsctp-1_0-0-1.22.0-150500.3.31.1
libgsttranscoder-1_0-0-1.22.0-150500.3.31.1
libgsturidownloader-1_0-0-1.22.0-150500.3.31.1
libgstva-1_0-0-1.22.0-150500.3.31.1
libgstvulkan-1_0-0-1.22.0-150500.3.31.1
libgstwayland-1_0-0-1.22.0-150500.3.31.1
libgstwebrtc-1_0-0-1.22.0-150500.3.31.1
libgstwebrtcnice-1_0-0-1.22.0-150500.3.31.1
typelib-1_0-CudaGst-1_0-1.22.0-150500.3.31.1
typelib-1_0-GstBadAudio-1_0-1.22.0-150500.3.31.1
typelib-1_0-GstCodecs-1_0-1.22.0-150500.3.31.1
typelib-1_0-GstCuda-1_0-1.22.0-150500.3.31.1
typelib-1_0-GstInsertBin-1_0-1.22.0-150500.3.31.1
typelib-1_0-GstMpegts-1_0-1.22.0-150500.3.31.1
typelib-1_0-GstPlay-1_0-1.22.0-150500.3.31.1
typelib-1_0-GstPlayer-1_0-1.22.0-150500.3.31.1
typelib-1_0-GstVa-1_0-1.22.0-150500.3.31.1
typelib-1_0-GstWebRTC-1_0-1.22.0-150500.3.31.1

Описание

An out-of-bounds read vulnerability was found in the VA JPEG decoder in GStreamer's gst-plugins-bad. The JPEG parser reads a segment length value from the bitstream without validating it against available data. A remote attacker could trick a user into opening a specially crafted JPEG file, causing downstream parsing to read beyond the provided input buffer, leading to a crash or potential information disclosure.


Затронутые продукты
SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:gstreamer-plugins-bad-1.22.0-150500.3.31.1
SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:gstreamer-plugins-bad-chromaprint-1.22.0-150500.3.31.1
SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:gstreamer-plugins-bad-devel-1.22.0-150500.3.31.1
SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:gstreamer-plugins-bad-lang-1.22.0-150500.3.31.1

Ссылки