High [CVE-2026-5056] Arbitrary code execution via stack-based buffer overflow in qtdemux
This high-severity Red Hat Linux advisory covers CVE-2026-5056 affecting Red Hat Enterprise Linux 10, Red Hat package: gstreamer1-plugins-good.
Aggregated and source-linked by VulniPulse. Data sources, validation and limitations.
VulniPulse record published Record updated
Android app · Google Play
Monitor future Red Hat Linux CVEs from your phone.
Choose a whole vendor or a precise platform, then receive matching security advisories by phone notification, email, or both. Coverage follows 32 official vendor sources and 160+ reviewed platform categories.
Summary
GStreamer qtdemux Stack-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of GStreamer.
Interaction with this library is required to exploit this vulnerability but attack vectors may vary depending on the implementation. The specific flaw exists within the parsing of UncompressedFrameConfigBox structures.
The issue results from the lack of proper validation of the length of user-supplied data prior to copying it to a fixed-length stack-based buffer. An attacker can leverage this vulnerability to execute code in the context of the current process.
Was ZDI-CAN-29392. This occurs due to insufficient data length validation when parsing UncompressedFrameConfigBox structures.
An Important security flaw in GStreamer's QuickTime parser could allow an attacker to execute malicious code if a user opens a specially crafted media file. Because the vulnerable code was introduced in GStreamer 1.26.0, Red Hat Enterprise Linux (RHEL) versions 9 and older do not contain this code and are not affected by this vulnerability.
Red Hat severity: Important — CVSS 7.8 (CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H). Weakness: CWE-121.
Red Hat fixing advisory: RHSA-2026:49508.
Affected products named by the advisory: Red Hat Enterprise Linux 10; Red Hat package: gstreamer1-plugins-good.
Affected versions
No affected-version range was extracted from the source record. The vendor advisory is authoritative — check it before change work.
Official advisory · high-confidence parse· fetched 9 days ago·verify at source
- gstreamer1-plugins-good-0:1.26.7-2.el10_2.2
- RHSA-2026:49508
Official advisory · high-confidence parse· fetched 9 days ago·verify at source
Mitigation checklist
- Do not open, preview, or auto-index untrusted MOV/MP4 files with GStreamer-based apps; leave RHEL memory protections and SELinux enabled
Official advisory · high-confidence parse· fetched 9 days ago·verify at source
Discussion(0)
No comments yet. Share field notes, upgrade gotchas, or questions — verify against the vendor advisory before acting on community advice.
Sign in to join the discussion.