USN-8130-1

Details

It was discovered that GStreamer Base Plugins incorrectly handled certain AVI media files. A remote attacker could use this issue to cause GStreamer Base Plugins to crash, resulting in a denial of service, or possibly execute arbitrary code.

Affected Packages

gst-plugins-base1.0

Ubuntu 22.04 LTS

Fixed in:

1.20.1-1ubuntu0.6

gst-plugins-base1.0

Ubuntu 24.04 LTS

Fixed in:

1.24.2-1ubuntu0.4

gst-plugins-base1.0

Ubuntu 25.10

Fixed in:

1.26.6-1ubuntu0.1

References

REPORT

https://ubuntu.com/security/CVE-2026-2921

ADVISORY

https://ubuntu.com/security/notices/USN-8130-1