https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2026-18299.htmlhttps://patchthecve.com/cve/CVE-2026-18299.htmlMon, 26 Oct 2026 10:10:00 +0000HIGH 7.8: GStreamer rtpsbcdepay Use-After-Free Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of GStreamer. Interaction with this library is required to exploit this vulnerability but attack vectors may vary depending on the https://patchthecve.com/cve/CVE-2026-18298.htmlhttps://patchthecve.com/cve/CVE-2026-18298.htmlMon, 26 Oct 2026 10:10:00 +0000HIGH 7.8: GStreamer PNG File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of GStreamer. User interaction is required to exploit this vulnerability in that the target must visit a malicioushttps://patchthecve.com/cve/CVE-2026-18297.htmlhttps://patchthecve.com/cve/CVE-2026-18297.htmlMon, 26 Oct 2026 10:10:00 +0000HIGH 7.8: GStreamer OGG File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of GStreamer. User interaction is required to exploit this vulnerability in that the target must visit a maliciouhttps://patchthecve.com/cve/CVE-2026-18296.htmlhttps://patchthecve.com/cve/CVE-2026-18296.htmlMon, 26 Oct 2026 10:10:00 +0000HIGH 7.8: GStreamer MRF File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of GStreamer. User interaction is required to exploit this vulnerability in that the target must visit a malicioushttps://patchthecve.com/cve/CVE-2026-18295.htmlhttps://patchthecve.com/cve/CVE-2026-18295.htmlMon, 26 Oct 2026 10:10:00 +0000HIGH 7.8: GStreamer MRF File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of GStreamer. User interaction is required to exploit this vulnerability in that the target must visit a malicious page ohttps://patchthecve.com/cve/CVE-2026-73434.htmlhttps://patchthecve.com/cve/CVE-2026-73434.htmlWed, 23 Sep 2026 15:17:17 +0000MEDIUM 6.1: A flaw was found in GStreamer gst-plugins-good (avidemux). In gst_avi_demux_riff_parse_vprp(), the number of available gst_riff_vprp_video_field_desc entries is calculated by dividing the remaining buffer size by the attacker-controlled vprp->fields value, rather than by sizeof(gst_riff_vprp_video_fhttps://patchthecve.com/cve/CVE-2026-73433.htmlhttps://patchthecve.com/cve/CVE-2026-73433.htmlWed, 23 Sep 2026 15:17:17 +0000MEDIUM 6.6: A flaw was found in GStreamer gst-plugins-good (avidemux). When parsing FUJIFILM metadata in an AVI strd chunk, gst_avi_demux_parse_strd() decrements a remaining-length counter by fixed offsets (98 and 10 bytes) without verifying sufficient data remains. For crafted strd payloads of exactly 106 or 1