Skip to content
Multiple Vulnerabilities in GStreamer Good and Bad Plugins Disclosed

Multiple Vulnerabilities in GStreamer Good and Bad Plugins Disclosed

First seen 1 Oct 2026, 22:10 UTC • •
API

Article Content

Browse articles
ThreatCluster AI
ThreatCluster •October 1, 2026 at 23:15 UTC
  • •Multiple vulnerabilities in GStreamer Good and Bad Plugins disclosed.
  • •Attackers could exploit these flaws to access sensitive information or cause denial of service.
  • •Patches are available for affected Ubuntu versions; users should update immediately.

Recent security advisories have revealed multiple vulnerabilities in GStreamer Good and Bad Plugins. The vulnerabilities include issues with FLAC audio streams and AVI file parsing, potentially allowing attackers to obtain sensitive information or cause denial of service. Specifically, CVE-2026-17072, CVE-2026-73433, CVE-2026-73434, and CVE-2026-88914 have been identified, affecting Ubuntu 20.04 LTS, 22.04 LTS, 24.04 LTS, and 26.04 LTS. The vulnerabilities were discovered by Yazan Balawneh and Seonwook Kim, with patches released for affected systems. Users are advised to update their systems to mitigate these risks.

Start a free Starter trial for enhanced analysis

Ask AI about this cluster

Updated just now How this analysis works

Timeline

2026-07-28
CVE-2026-17072 published
Vulnerability in GStreamer Good Plugins affecting FLAC audio streams disclosed.
Ubuntu
2026-08-12
CVE-2026-73433 and CVE-2026-73434 published
Vulnerabilities in GStreamer Good Plugins related to AVI file parsing disclosed.
Ubuntu
2026-09-11
CVE-2026-88914 published
Vulnerability in GStreamer Good Plugins affecting closed caption data disclosed.
Ubuntu
2026-09-30
USN-8855-1 published
Ubuntu released security notice detailing vulnerabilities in GStreamer Bad Plugins.
Ubuntu
2026-10-01
USN-8863-1 published
Ubuntu released security notice detailing multiple vulnerabilities in GStreamer Good Plugins.
Ubuntu

More articles in this cluster (2)

Following this threat?

Track Ubuntu and CVE-2026-17072 in your own feed — you're alerted when they show up in new reporting, leak sites or exploitation.

Free account · no card needed

Extracted Entities (7)

1 / 2

Common questions

Which versions of Ubuntu are affected?
Ubuntu 20.04 LTS, 22.04 LTS, 24.04 LTS, and 26.04 LTS are affected.
What types of attacks can occur?
Attackers may exploit these vulnerabilities to access sensitive information or cause denial of service.
How can I protect my system?
Update your system to the latest package versions as recommended in the security advisories.