Back Linuxsecurity

Ubuntu 25.10 GStreamer Good Plugins Key Denial of Service CVE-2026

Linuxsecurity •LinuxSecurity Advisories • May 20, 2026

A security issue affects these releases of Ubuntu and its derivatives: - Ubuntu 25.10 Summary: GStreamer Good Plugins could be made to crash or run programs if it opened a specially crafted file. Software Description: - gst-plugins-good1.0: GStreamer plugins Details: It was discovered that GStreamer Good Plugins incorrectly handled certain MOV/MP4 media files. A remote attacker could use this issue to cause GStreamer Good Plugins to crash, resulting in a denial of service, or possibly execute arbitrary code.

The problem can be corrected by updating your system to the following package versions: Ubuntu 25.10 gstreamer1.0-plugins-good 1.26.5-1ubuntu2.2 libgstreamer-plugins-good1.0-0 1.26.5-1ubuntu2.2 In general, a standard system update will make all the necessary changes.

Ubuntu Security Notice USN-8285-1

Get the latest Linux and open source security news straight to your inbox.

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Critical Vulnerability in GStreamer Good Plugins Affects Ubuntu 25.10 A vulnerability in GStreamer Good Plugins has been identified, allowing remote attackers to crash the software or execute arbitrary code by exploiting specially crafted MOV/MP4 media files. This issue affects Ubuntu 25.10 and its derivatives. The vulnerability could lead to denial of service, posing significant risks to users. Affected package versions include gstreamer1.0-plugins-good 1.26.5-1ubuntu2.2 and libgstreamer-plugins-good1.0-0 1.26.5-1ubuntu2.2. Users are advised to apply standard system updates to mitigate the risk. The vulnerability has been assigned a CVE identifier, CVE-2026, although specific details on the CVE number were not provided in the articles. The problem was confirmed on May 20, 2026, with advisories published by both Ubuntu and Linuxsecurity. 9 sources 71

Extracted Entities

Ubuntu 25.10 GStreamer Good Plugins Key Denial of Service CVE-2026

The full story

Extracted Entities

Attack Types (2)

Companies (1)

Platforms (1)