There are packages installed that are affected by a vulnerability referenced in the following CVE:

  - A flaw was found in GStreamer's gst-plugins-bad H.265 video parser. When parsing a specially crafted H.265
    bitstream containing a Screen Content Coding (SCC) extension with certain palette predictor initializer
    settings, an integer underflow in the upper-bound computation allows the parser to accept an out-of-range
    value for the number of palette predictor entries. This causes the parser to write beyond the end of a
    fixed-size array, resulting in memory corruption and an application crash. An attacker can deliver the
    malformed bitstream as a local file or over a network stream such as HTTP, HLS, DASH, RTSP, RTP, or
    WebRTC. Successful exploitation requires the application to open or play that content, and is limited to a
    denial-of-service impact. (CVE-2026-119727)

Linux/Unix 主机中安装的一个或多个程序包受到一个漏洞影响，而供应商没有提供补丁程序。

  - 在 GStreamer 的 gst-plugins-bad H.265 视频解析器中发现一个缺陷。解析包含具有屏幕内容编码 （SCC） 扩展（具有特定调色板预测符初始化程序设置）的特别构建的 H.265 比特流时，上界计算中的整数下溢允许解析器接受调色板预测符条目数的超出范围值。这会造成解析器在固定大小数组的结尾之外写入，从而导致内存损坏和应用程序崩溃。成功利用需要攻击者向易受攻击的应用程序提供格式错误的 H.265 媒体文件，并且仅限于拒绝服务影响。（CVE-2026-119727）

请注意，Nessus 依赖供应商报告的程序包是否存在进行判断。

Linux/Unix 主機上安裝了一個或多個受到弱點影響的套件，且廠商未提供可用的修補程式。

  - 在 GStreamer 的 gst-plugins-bad H.265 視訊剖析器中發現缺陷。剖析包含具有特定調色盤預測值初始化程式設定之畫面內容編碼 （SCC） 延伸的特製 H.265 位元串流時，上界計算中的整數下溢可讓剖析器接受調色盤預測值項目數目的超出範圍值。這會導致剖析器寫入固定大小陣列的結尾之外，進而導致記憶體損毀和應用程式損毀。成功利用攻擊需要攻擊者向易受攻擊的應用程式提供格式錯誤的 H.265 媒體檔案，並且僅限於拒絕服務影響。（CVE-2026-119727）

請注意，Nessus 的判定取決於廠商所報告的套件是否存在。

Linux/Unix ホストには、ベンダーが提供するパッチが利用できない脆弱性の影響を受ける複数のパッケージがインストールされています。

  - GStreamer の gst-plugins-bad H.265 動画パーサーで欠陥が見つかりました。特定のパレットプレディクタ初期化子設定で画面コンテンツコーディング(SCC)拡張を含む特別に細工された H.265 ビットストリームを解析する際に、上限計算における整数アンダーフローにより、パーサーはパレットプレディクタエントリの数に対して範囲外の値を受け入れる可能性があります。これにより、パーサーが固定サイズの配列の範囲を超えて書き込みを行い、メモリ破損やアプリケーションのクラッシュが発生します。悪用に成功するには、攻撃者は、無効な形式の H.265 メディアファイルを脆弱なアプリケーションに提供する必要があります。このファイルは、サービス拒否の影響に限定されます。(CVE-2026-119727)

Nessus は、ベンダーから報告されたパッケージの存在に依存していることに注意してください。

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - A flaw was found in GStreamer's gst-plugins-bad H.265 video parser. When parsing a specially crafted H.265     bitstream containing a Screen Content Coding (SCC) extension with certain palette predictor initializer     settings, an integer underflow in the upper-bound computation allows the parser to accept an out-of-range     value for the number of palette predictor entries. This causes the parser to write beyond the end of a     fixed-size array, resulting in memory corruption and an application crash. Successful exploitation     requires an attacker to provide a malformed H.265 media file to a vulnerable application, and is limited     to a denial-of-service impact. (CVE-2026-119727)

Note that Nessus relies on the presence of the package as reported by the vendor.

It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2023-2026-3424 advisory.

    A flaw was found in GStreamer's gst-plugins-bad H.265 video parser. When parsing a specially crafted H.265     bitstream containing a Screen Content Coding (SCC) extension with certain palette predictor initializer     settings, an integer underflow in the upper-bound computation allows the parser to accept an out-of-range     value for the number of palette predictor entries. This causes the parser to write beyond the end of a     fixed-size array, resulting in memory corruption and an application crash. Successful exploitation     requires an attacker to provide a malformed H.265 media file to a vulnerable application, and is limited     to a denial-of-service impact. (CVE-2026-119727)

    A flaw was found in the H.264 video parser in gst-plugins-bad. When processing a specially crafted H.264     video file with malformed Multiview (MVC) Sequence Parameter Set data, the parser can dereference a NULL     pointer during the cleanup of partially allocated internal structures after a parse failure. This can     cause the application using GStreamer to crash, resulting in a denial of service. (CVE-2026-119728)

    A flaw was found in GStreamer. An integer overflow vulnerability in the AV1 LEB128 variable-length integer     parser allows a remote attacker to cause a crash in applications that process AV1 media content. By     crafting a malformed AV1 bitstream containing an invalid LEB128-encoded value, an attacker can cause     integer overflow in the parser, resulting in incorrect length values being used during stream processing,     which can lead to a denial of service. (CVE-2026-119729)

Tenable has extracted the preceding description block directly from the tested product security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The version of gstreamer1-plugins-bad-free installed on the remote host is prior to 1.18.4-5. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2-2026-4094 advisory.

    A flaw was found in GStreamer's gst-plugins-bad H.265 video parser. When parsing a specially crafted H.265     bitstream containing a Screen Content Coding (SCC) extension with certain palette predictor initializer     settings, an integer underflow in the upper-bound computation allows the parser to accept an out-of-range     value for the number of palette predictor entries. This causes the parser to write beyond the end of a     fixed-size array, resulting in memory corruption and an application crash. Successful exploitation     requires an attacker to provide a malformed H.265 media file to a vulnerable application, and is limited     to a denial-of-service impact. (CVE-2026-119727)

    A flaw was found in the H.264 video parser in gst-plugins-bad. When processing a specially crafted H.264     video file with malformed Multiview (MVC) Sequence Parameter Set data, the parser can dereference a NULL     pointer during the cleanup of partially allocated internal structures after a parse failure. This can     cause the application using GStreamer to crash, resulting in a denial of service. (CVE-2026-119728)

    A flaw was found in GStreamer. An integer overflow vulnerability in the AV1 LEB128 variable-length integer     parser allows a remote attacker to cause a crash in applications that process AV1 media content. By     crafting a malformed AV1 bitstream containing an invalid LEB128-encoded value, an attacker can cause     integer overflow in the parser, resulting in incorrect length values being used during stream processing,     which can lead to a denial of service. (CVE-2026-119729)

Tenable has extracted the preceding description block directly from the tested product security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

ID	Name	Product	Family	Published	Updated	Severity
478158	Echo: gst-plugins-bad1.0: security update to 1.26.2-3+deb13u3+e4	Tenable Self-Hosted Container Security	Echo Local Security Checks	11/1/2026	11/4/2026	medium
478158	Echo: gst-plugins-bad1.0: security update to 1.26.2-3+deb13u3+e4	Tenable Cloud Security	Echo Local Security Checks	11/1/2026	11/4/2026	medium
374309	Linux Distros 未修补的漏洞：CVE-2026-119727	Nessus	Misc.	10/30/2026	11/2/2026	medium
374309	Linux Distros 未修補弱點：CVE-2026-119727	Nessus	Misc.	10/30/2026	11/2/2026	medium
374309	Linux Distros のパッチ未適用の脆弱性: CVE-2026-119727	Nessus	Misc.	10/30/2026	11/2/2026	medium
374309	Linux Distros Unpatched Vulnerability : CVE-2026-119727	Nessus	Misc.	10/30/2026	11/2/2026	medium
379874	Amazon Linux 2023 : gstreamer1-plugin-openh264, gstreamer1-plugins-bad-free, gstreamer1-plugins-bad-free-devel (ALAS2023-2026-3424)	Nessus	Amazon Linux Local Security Checks	11/12/2026	11/12/2026	medium
379821	Amazon Linux 2 : gstreamer1-plugins-bad-free (ALAS-2026-4094)	Nessus	Amazon Linux Local Security Checks	11/12/2026	11/12/2026	medium

Detections

Analytics

Plugins Search

medium

medium

medium

medium

medium

medium

medium

medium