Linuxsecurity Multiple CVEs Identified in Fedora GStreamer Plugins Update
Article Content
- •Fedora GStreamer plugins updated to version 1.28.8 to address multiple vulnerabilities.
- •CVE-2026-86476 has a high CVSS score of 8.4 and was published on October 14, 2026.
- •Users are urged to apply updates immediately to protect against these vulnerabilities.
On October 16, 2026, Fedora released updates for GStreamer plugins to version 1.28.8, addressing several vulnerabilities. Notably, CVE-2026-19387, a high-severity heap out-of-bounds write flaw, was published on August 10, 2026. Other vulnerabilities include CVE-2026-18649, which has a high CVSS score of 7.5 and was published on August 6, 2026, and CVE-2026-86476, with a CVSS of 8.4, published on October 14, 2026. CVE-2026-46471, a medium-severity issue, was disclosed on October 16, 2026. The vulnerabilities affect various GStreamer plugins, potentially allowing for code execution and memory issues. Users are advised to update their systems using the 'dnf' update program to mitigate these risks.
Ask AI about this cluster
Answers cite the sources they use
Timeline
More articles in this cluster (4)
Following this threat?
Track Fedora and CVE-2026-18649 in your own feed — you're alerted when they show up in new reporting, leak sites or exploitation.
Free account · no card needed
Common questions
Which GStreamer plugins are affected?
What should I do to protect my system?
Are there any known exploits for these vulnerabilities?
Continue Reading
Brotli Decoder Vulnerability Patched Across Multiple Linux Distributions A vulnerability, CVE-2026-111497, affecting the Brotli decoder has been patched in various Linux distributions, including Fedora 44 and Oracle Linux 10. The flaw allows for an out-of-bounds write, which could potentially enable attackers to execute arbitrary code. The vulnerability was published on October 22, 2026…