It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2023-2026-2121 advisory.

    GStreamer MRF File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability. This vulnerability     allows remote attackers to execute arbitrary code on affected installations of GStreamer. User interaction     is required to exploit this vulnerability in that the target must visit a malicious page or open a     malicious file.

    The specific flaw exists within the parsing of MRF files. The issue results from the lack of proper     validation of user-supplied data, which can result in a write past the end of an allocated buffer. An     attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-     CAN-29510. (CVE-2026-18295)

    GStreamer MRF File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability. This     vulnerability allows remote attackers to execute arbitrary code on affected installations of GStreamer.
    User interaction is required to exploit this vulnerability in that the target must visit a malicious page     or open a malicious file.

    The specific flaw exists within the parsing of MRF files. The issue results from the lack of proper     validation of the length of user-supplied data prior to copying it to a heap-based buffer. An attacker can     leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-29608.
    (CVE-2026-18296)

    A flaw was found in the GStreamer gst-plugins-good package. The rtph264depay and rtph265depay RTP     depayloader elements do not enforce a maximum size limit on the reassembly buffer used during fragmented     RTP packet processing. A remote, unauthenticated attacker can send a continuous stream of RTP fragments     without ever transmitting an end-of-fragment marker, causing the reassembly buffer to grow without bound     until process memory is exhausted. This results in a denial of service through process termination.
    (CVE-2026-18649)

Tenable has extracted the preceding description block directly from the tested product security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

Detections

Analytics

Amazon Linux 2023 : gstreamer1-plugins-good, gstreamer1-plugins-good-gtk (ALAS2023-2026-2121)

high Nessus Plugin ID 342045

Version 1.3

Version 1.2

Version 1.1

Version 1.3 Sep 16, 2026, 12:20 AM CVE (set "CVE" coverage to "CVE-2026-18295,CVE-2026-18296,CVE-2026-18649") CVSS metrics ("CVSSv2 score" set to 10.0) CVSS metrics ("CVSSv2 vector" set to "CVSS2#AV:N/AC:L/Au:N/C:C/I:C/A:C") CVSSv3 score source (set to "CVE-2026-18296") Plugin metadata Plugin Feed: 202609160020
Version 1.2 Sep 2, 2026, 11:53 AM CVSS metrics ("CVSSv2 vector" set to "CVSS2#AV:L/AC:L/Au:N/C:C/I:C/A:C") CVSS metrics ("CVSSv2 score" set to 7.2) Plugin Feed: 202609021153
Version 1.1 Sep 1, 2026, 5:14 AM New Plugin Feed: 202609010514