Back Linuxsecurity

Fedora 45 mingw-gstreamer1 NULL Pointer Issue Vulnern 2026

Linuxsecurity •LinuxSecurity Advisories • September 27, 2026

Share: View original

CISA confirms exploitation of a Linux firewall flaw. Check if your systems need the fix. ×

GStreamer is a streaming-media framework, based on graphs of filters

which operate on media data. Applications using this library can do

anything from real-time sound processing to playing videos, and just

anything else media-related. Its plug-in-based architecture

means that new data types or processing capabilities can be added by

installing new plug-ins.

Update to gstreamer-1.28.7.

* Fri Sep 18 2026 Sandro Mani - 1.28.7-1 - Update to 1.28.7

[ 1 ] Bug #2527944 - CVE-2026-85150 mingw-gstreamer1-plugins-base: gstreamer: NULL/invalid-pointer dereference in gst_rtsp_message_parse_auth_credentials() when parsing a crafted Digest Authorization/WWW-Authenticate header [fedora-all]

This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2026-0d2736f2fe' at the command line. For more information, refer to the dnf documentation available at

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Linux Security - Your source for Top Linux News, Advisories, HOWTOs and Feature Releases

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Critical NULL Pointer Vulnerability in GStreamer Affects Fedora Users A critical NULL pointer dereference vulnerability (CVE-2026-85150) has been identified in the GStreamer framework, affecting Fedora versions 44 and 45. This flaw allows attackers to exploit the gst_rtsp_message_parse_auth_credentials function, potentially leading to application crashes or arbitrary code execution. The vulnerability was published on September 3, 2026, and has been confirmed to be actively exploited in the wild, prompting advisories from CISA. Users are advised to update to GStreamer version 1.28.7 to mitigate the risk. The vulnerability impacts systems using mingw-gstreamer1-plugins-base and mingw-gstreamer1-plugins-good. The updates were released on September 18, 2026, and administrators are urged to apply them immediately. Failure to update could leave systems vulnerable to exploitation. 8 sources 73

Extracted Entities

Fedora 45 mingw-gstreamer1 NULL Pointer Issue Vulnern 2026

The full story

Extracted Entities

Attack Types (1)

CVEs (1)

CWE Weaknesses (1)