Skip to content
Critical NULL Pointer Vulnerability in GStreamer Affects Fedora Users

Critical NULL Pointer Vulnerability in GStreamer Affects Fedora Users

First seen 27 Sep 2026, 19:07 UTC • •
API

Article Content

Browse articles
ThreatCluster AI
ThreatCluster •September 27, 2026 at 19:57 UTC
  • •CVE-2026-85150 is a critical NULL pointer vulnerability in GStreamer.
  • •Active exploitation of the vulnerability has been confirmed by CISA.
  • •Users must update to GStreamer version 1.28.7 to mitigate risks.

A critical NULL pointer dereference vulnerability (CVE-2026-85150) has been identified in the GStreamer framework, affecting Fedora versions 44 and 45. This flaw allows attackers to exploit the gst_rtsp_message_parse_auth_credentials function, potentially leading to application crashes or arbitrary code execution. The vulnerability was published on September 3, 2026, and has been confirmed to be actively exploited in the wild, prompting advisories from CISA. Users are advised to update to GStreamer version 1.28.7 to mitigate the risk. The vulnerability impacts systems using mingw-gstreamer1-plugins-base and mingw-gstreamer1-plugins-good. The updates were released on September 18, 2026, and administrators are urged to apply them immediately. Failure to update could leave systems vulnerable to exploitation.

Start a free Starter trial for enhanced analysis

Ask AI about this cluster

Updated just now How this analysis works

Timeline

2026-09-03
CVE-2026-85150 published
A critical NULL pointer dereference vulnerability in GStreamer was disclosed, affecting Fedora versions 44 and 45.
Linuxsecurity
2026-09-18
Updates released for GStreamer
Fedora released updates to GStreamer version 1.28.7 to address CVE-2026-85150, urging users to apply them immediately.
Linuxsecurity
Recent
Active exploitation confirmed
CISA confirmed that the vulnerability is being actively exploited in the wild, raising urgency for updates.
Linuxsecurity

More articles in this cluster (8)

Following this threat?

Track Fedora and CVE-2026-85150 in your own feed — you're alerted when they show up in new reporting, leak sites or exploitation.

Free account · no card needed

Extracted Entities (6)

1 / 3