openSUSE gstreamer-plugins-bad Moderate Parser Crash Issue 2026-3527

Audit Linux privileges now to limit compromise, escalation, and system-wide damage. Review Linux Privileges ×

This update for gstreamer-plugins-bad fixes the following issue:

* CVE-2026-52718: byte count instead of a bit count in

gst_av1_parser_parse_tile_list_obu() can cause parser desynchronization and

an application crash (bsc#1268394).

## Patch Instructions:

To install this SUSE update use the SUSE recommended installation methods like

YaST online_update or "zypper patch".

Alternatively you can run the command listed for your product:

* Desktop Applications Module 15-SP7

zypper in -t patch SUSE-SLE-Module-Desktop-Applications-15-SP7-2026-3527=1

* Basesystem Module 15-SP7

zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP7-2026-3527=1

* SUSE Package Hub 15 15-SP7

zypper in -t patch SUSE-SLE-Module-Packagehub-Subpackages-15-SP7-2026-3527=1

zypper in -t patch SUSE-2026-3527=1

* openSUSE Leap 15.6 (aarch64 i586 ppc64le s390x x86_64)

* typelib-1_0-GstPlay-1_0-1.24.0-150600.4.12.1

* typelib-1_0-GstAnalytics-1_0-1.24.0-150600.4.12.1

* typelib-1_0-GstVulkanXCB-1_0-1.24.0-150600.4.12.1

* libgstplay-1_0-0-debuginfo-1.24.0-150600.4.12.1

* typelib-1_0-GstVa-1_0-1.24.0-150600.4.12.1

* libgstbadaudio-1_0-0-debuginfo-1.24.0-150600.4.12.1

* typelib-1_0-GstTranscoder-1_0-1.24.0-150600.4.12.1

* libgstwebrtcnice-1_0-0-1.24.0-150600.4.12.1

* gstreamer-plugins-bad-debuginfo-1.24.0-150600.4.12.1

* libgstdxva-1_0-0-1.24.0-150600.4.12.1

* libgstva-1_0-0-debuginfo-1.24.0-150600.4.12.1

* libgstsctp-1_0-0-1.24.0-150600.4.12.1

* libgstbasecamerabinsrc-1_0-0-1.24.0-150600.4.12.1

* gstreamer-plugins-bad-devel-1.24.0-150600.4.12.1

* libgstdxva-1_0-0-debuginfo-1.24.0-150600.4.12.1

* typelib-1_0-GstVulkan-1_0-1.24.0-150600.4.12.1

* typelib-1_0-GstBadAudio-1_0-1.24.0-150600.4.12.1

* libgstisoff-1_0-0-debuginfo-1.24.0-150600.4.12.1

* gstreamer-plugins-bad-chromaprint-1.24.0-150600.4.12.1

*

*

Get the latest Linux and open source security news straight to your inbox.