The GStreamer project reports:
Multiple security issues were identified and fixed in the GStreamer framework.
- GStreamer-SA-2026-0067: Heap buffer overflow and memory leak in JPEG 2000 decoder
- GStreamer-SA-2026-0068: Heap buffer overflow in QCELP RTP depayloader
- GStreamer-SA-2026-0069: Heap buffer overflow in FFmpeg demuxer wrapper
- GStreamer-SA-2026-0070: Out-of bounds write in H.265/HEVC parser short-term RPS parsing
- GStreamer-SA-2026-0071: Heap buffer overflow in DVD subpicture decoder
- GStreamer-SA-2026-0072: Multiple out-of-bounds reads, out-of-bounds writes, and integer overflow vulnerabilities in the AVI demuxer
- GStreamer-SA-2026-0073: Out-of-bounds read in Matroska demuxer FLAC header parser
- GStreamer-SA-2026-0075: Integer overflow and underflow in ASF demuxer bounds checks
- GStreamer-SA-2026-0076: Unbounded memory growth in H.264/H.265 RTP depayloaders during fragmented NAL unit reassembly
- GStreamer-SA-2026-0077: Heap out-of-bounds write in IMA ADPCM audio decoder