The remote MiracleLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2026-421:01 advisory.

    * GStreamer: GStreamer: Arbitrary code execution via ASF file processing (CVE-2026-2920)
      * GStreamer: GStreamer: Remote Code Execution via heap-based buffer overflow in JPEG parser     (CVE-2026-3082)
      * GStreamer: GStreamer: Remote Code Execution via Heap-based Buffer Overflow in rtpqdm2depay     (CVE-2026-3085)
      * GStreamer: GStreamer: Arbitrary code execution via RIFF palette integer overflow in AVI file handling     (CVE-2026-2921)
      * GStreamer: GStreamer: Remote Code Execution via Out-Of-Bounds Write in rtpqdm2depay (CVE-2026-3083)
      * GStreamer: GStreamer: Remote Code Execution via out-of-bounds write in RealMedia Demuxer     (CVE-2026-2922)
      * GStreamer: GStreamer: Remote Code Execution via out-of-bounds write in DVB Subtitles handling     (CVE-2026-2923)

Tenable has extracted the preceding description block directly from the MiracleLinux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

Detections

Analytics

MiracleLinux 9 : gstreamer1-plugins-bad-free, gstreamer1-plugins-base, gstreamer1-plugins-good, and gstreamer1-plugins-ugly-free (AXSA:2026-421:01)

high Nessus Plugin ID 306115

Version 1.2

Version 1.1

Version 1.2 Apr 15, 2026, 8:20 AM Plugin metadata Plugin Feed: 202604150820
Version 1.1 Apr 13, 2026, 4:17 PM New Plugin Feed: 202604131617