# Gstreamer Gst-Plugins-Bad vulnerabilities Source: https://junglewise.ai/threats/technologies/gst-plugins-bad Publisher: Junglewise Threat Intelligence, https://junglewise.ai/threats Updated: 11 November 2026, 03:07 UTC. Rebuilt every hour. Data: https://junglewise.ai/threats/technologies/gst-plugins-bad.json License: CC BY 4.0 with a link back Junglewise Threat Intelligence has tracked 19 vulnerabilities in Gstreamer Gst-Plugins-Bad: 4 in the last 7 days and 8 in the last 90 days, 0 of them critical and 0 exploited in the wild. The most recent, CVE-2026-125706, was published on 10 November 2026. 4 vulnerabilities in the last four weeks, up from none in the four before. ## Counts - Last 7 days: 4 - Last 30 days: 8 - Last 90 days: 8 - All time: 19 (0 critical, 0 exploited in the wild) ## About Gstreamer Gst-Plugins-Bad GStreamer library providing multimedia plugins for audio, video, and other media processing with varying maturity levels. ## Latest Gstreamer Gst-Plugins-Bad vulnerabilities - [CVE-2026-125706: GStreamer gst-plugins-bad out-of-bounds read in MPEG/DVD parsing](https://junglewise.ai/threats/cve-2026-125706-a-flaw-was-found-in-gstreamer-s-gst-plugins-bad-mpeg-program) (medium, CVSS 5.5, published 10 Nov 2026) - [CVE-2026-125703: GStreamer gst-plugins-bad MXF plugin buffer overflow in VANC handling](https://junglewise.ai/threats/cve-2026-125703-a-flaw-was-found-in-the-gstreamer-gst-plugins-bad-mxf-plugin) (medium, CVSS 5.5, published 10 Nov 2026) - [CVE-2026-121611: GStreamer gst-plugins-bad H.265 uninitialized memory use](https://junglewise.ai/threats/cve-2026-121611-a-flaw-was-found-in-gstreamer-s-gst-plugins-bad-package-a-use-of) (medium, CVSS 6.5, published 9 Nov 2026) - [CVE-2026-121601: GStreamer MXF demuxer out-of-bounds read](https://junglewise.ai/threats/cve-2026-121601-a-flaw-was-found-in-gstreamer-s-mxf-demuxer-plugin-gst-plugins) (medium, CVSS 6.1, published 9 Nov 2026) - [CVE-2026-121259: GStreamer gst-plugins-bad JPEG 2000 decimator integer overflow and division by zero](https://junglewise.ai/threats/cve-2026-121259-a-flaw-was-found-in-the-gstreamer-jpeg-2000-decimator-in-gst) (medium, CVSS 6.5, published 3 Nov 2026) - [CVE-2026-119728: GStreamer gst-plugins-bad NULL pointer dereference in H.264 MVC parser](https://junglewise.ai/threats/cve-2026-119728-a-flaw-was-found-in-the-h-264-video-parser-in-gst-plugins-bad) (medium, CVSS 5.5, published 30 Oct 2026) - [CVE-2026-119727: GStreamer gst-plugins-bad H.265 parser buffer overflow](https://junglewise.ai/threats/cve-2026-119727-a-flaw-was-found-in-gstreamer-s-gst-plugins-bad-h-265-video) (medium, CVSS 6.5, published 30 Oct 2026) - [CVE-2026-119777: GStreamer gst-plugins-bad H.266/VVC parser integer overflow](https://junglewise.ai/threats/cve-2026-119777-a-flaw-was-found-in-gstreamer-s-gst-plugins-bad-h-266-vvc-parser) (high, CVSS 7.8, published 30 Oct 2026) - [CVE-2026-59692: GStreamer DTLS plugin stack buffer overflow in openssl_verify_callback](https://junglewise.ai/threats/cve-2026-59692-gstreamer-dtls-plugin-stack-buffer-overflow-in-openssl-verify) (high, CVSS 7.5, published 9 Jul 2026) - [CVE-2026-59691: GStreamer rfbsrc heap buffer overflow in Hextile decoding](https://junglewise.ai/threats/cve-2026-59691-gstreamer-rfbsrc-heap-buffer-overflow-in-hextile-decoding) (high, CVSS 7.1, published 9 Jul 2026) - [CVE-2026-14935: GStreamer webrtcbin logic error in SDP fingerprint validation](https://junglewise.ai/threats/cve-2026-14935-gstreamer-webrtcbin-logic-error-in-sdp-fingerprint-validation) (low, CVSS 3.7, published 7 Jul 2026) - [CVE-2026-12891: GStreamer gst-plugins-bad out-of-bounds read in H.266 parser](https://junglewise.ai/threats/cve-2026-12891-gstreamer-gst-plugins-bad-out-of-bounds-read-in-h-266-parser) (medium, CVSS 4.3, published 23 Jun 2026) - [CVE-2026-52719: GStreamer gst-plugins-bad out-of-bounds read in VA JPEG decoder](https://junglewise.ai/threats/cve-2026-52719-gstreamer-gst-plugins-bad-out-of-bounds-read-in-va-jpeg-decoder) (high, CVSS 7.1, published 15 Jun 2026) - [CVE-2026-52718: GStreamer gst-plugins-bad denial of service in AV1 codec parser](https://junglewise.ai/threats/cve-2026-52718-gstreamer-gst-plugins-bad-denial-of-service-in-av1-codec-parser) (medium, CVSS 6.5, published 15 Jun 2026) - [CVE-2026-3086: GStreamer H.266 Codec Parser out-of-bounds write in APS units](https://junglewise.ai/threats/cve-2026-3086-gstreamer-h-266-codec-parser-out-of-bounds-write-in-aps-units) (high, CVSS 7.8, published 16 Mar 2026) - [CVE-2026-3084: GStreamer H.266 Codec Parser integer underflow in picture partitions](https://junglewise.ai/threats/cve-2026-3084-gstreamer-h-266-codec-parser-integer-underflow-in-picture) (high, CVSS 7.8, published 16 Mar 2026) - [CVE-2026-3082: GStreamer JPEG Parser heap overflow in Huffman table processing](https://junglewise.ai/threats/cve-2026-3082-gstreamer-jpeg-parser-heap-overflow-in-huffman-table-processing) (high, CVSS 7.8, published 16 Mar 2026) - [CVE-2026-3081: GStreamer H.266 codec parser stack-based buffer overflow](https://junglewise.ai/threats/cve-2026-3081-gstreamer-h-266-codec-parser-stack-based-buffer-overflow) (high, CVSS 7.8, published 16 Mar 2026) - [CVE-2016-9812: GStreamer gst-plugins-bad out-of-bounds read in gst_mpegts_section_new](https://junglewise.ai/threats/cve-2016-9812-gstreamer-gst-plugins-bad-out-of-bounds-read-in-gst-mpegts-section) (high, CVSS 7.5, published 13 Jan 2017) ## Most severe Gstreamer Gst-Plugins-Bad vulnerabilities - [CVE-2026-3082: GStreamer JPEG Parser heap overflow in Huffman table processing](https://junglewise.ai/threats/cve-2026-3082-gstreamer-jpeg-parser-heap-overflow-in-huffman-table-processing) (high, CVSS 7.8, published 16 Mar 2026) - [CVE-2026-3086: GStreamer H.266 Codec Parser out-of-bounds write in APS units](https://junglewise.ai/threats/cve-2026-3086-gstreamer-h-266-codec-parser-out-of-bounds-write-in-aps-units) (high, CVSS 7.8, published 16 Mar 2026) - [CVE-2026-3084: GStreamer H.266 Codec Parser integer underflow in picture partitions](https://junglewise.ai/threats/cve-2026-3084-gstreamer-h-266-codec-parser-integer-underflow-in-picture) (high, CVSS 7.8, published 16 Mar 2026) - [CVE-2026-3081: GStreamer H.266 codec parser stack-based buffer overflow](https://junglewise.ai/threats/cve-2026-3081-gstreamer-h-266-codec-parser-stack-based-buffer-overflow) (high, CVSS 7.8, published 16 Mar 2026) - [CVE-2026-119777: GStreamer gst-plugins-bad H.266/VVC parser integer overflow](https://junglewise.ai/threats/cve-2026-119777-a-flaw-was-found-in-gstreamer-s-gst-plugins-bad-h-266-vvc-parser) (high, CVSS 7.8, published 30 Oct 2026) - [CVE-2026-59692: GStreamer DTLS plugin stack buffer overflow in openssl_verify_callback](https://junglewise.ai/threats/cve-2026-59692-gstreamer-dtls-plugin-stack-buffer-overflow-in-openssl-verify) (high, CVSS 7.5, published 9 Jul 2026) - [CVE-2016-9812: GStreamer gst-plugins-bad out-of-bounds read in gst_mpegts_section_new](https://junglewise.ai/threats/cve-2016-9812-gstreamer-gst-plugins-bad-out-of-bounds-read-in-gst-mpegts-section) (high, CVSS 7.5, published 13 Jan 2017) - [CVE-2026-59691: GStreamer rfbsrc heap buffer overflow in Hextile decoding](https://junglewise.ai/threats/cve-2026-59691-gstreamer-rfbsrc-heap-buffer-overflow-in-hextile-decoding) (high, CVSS 7.1, published 9 Jul 2026) - [CVE-2026-52719: GStreamer gst-plugins-bad out-of-bounds read in VA JPEG decoder](https://junglewise.ai/threats/cve-2026-52719-gstreamer-gst-plugins-bad-out-of-bounds-read-in-va-jpeg-decoder) (high, CVSS 7.1, published 15 Jun 2026) - [CVE-2026-121611: GStreamer gst-plugins-bad H.265 uninitialized memory use](https://junglewise.ai/threats/cve-2026-121611-a-flaw-was-found-in-gstreamer-s-gst-plugins-bad-package-a-use-of) (medium, CVSS 6.5, published 9 Nov 2026) ## Vulnerabilities per week 4 vulnerabilities in the last four weeks, up from none in the four before. | Week of | Vulns | Critical | Exploited | | --- | --- | --- | --- | | 17 Aug 2026 | 0 | 0 | 0 | | 24 Aug 2026 | 0 | 0 | 0 | | 31 Aug 2026 | 0 | 0 | 0 | | 7 Sep 2026 | 0 | 0 | 0 | | 14 Sep 2026 | 0 | 0 | 0 | | 21 Sep 2026 | 0 | 0 | 0 | | 28 Sep 2026 | 0 | 0 | 0 | | 5 Oct 2026 | 0 | 0 | 0 | | 12 Oct 2026 | 0 | 0 | 0 | | 19 Oct 2026 | 0 | 0 | 0 | | 26 Oct 2026 | 3 | 0 | 0 | | 2 Nov 2026 | 1 | 0 | 0 | | 9 Nov 2026 | 4 | 0 | 0 | ## Other Gstreamer technologies - [GStreamer](https://junglewise.ai/threats/technologies/gstreamer): 33 vulnerabilities - [Gstreamer Gst-Plugins-Good](https://junglewise.ai/threats/technologies/gstreamer-gst-plugins-good): 9 vulnerabilities - [Gstreamer Gst-Plugins-Ugly](https://junglewise.ai/threats/technologies/gst-plugins-ugly): 4 vulnerabilities - [Gstreamer Gst-Plugins-Base](https://junglewise.ai/threats/technologies/gstreamer-gst-plugins-base): 4 vulnerabilities ## Sources NVD, GitHub Security Advisories, OSV, the CISA Known Exploited Vulnerabilities catalog, FIRST EPSS and vendor advisories. Rebuilt every hour. Cite as: Junglewise Threat Intelligence, "Gstreamer Gst-Plugins-Bad vulnerabilities", https://junglewise.ai/threats/technologies/gst-plugins-bad, 11 November 2026.