There are packages installed that are affected by a vulnerability referenced in the following CVE:

  - A flaw was found in GStreamer's gst-plugins-bad H.266/VVC parser. When processing a malformed H.266 media
    file or stream, an integer overflow while parsing profile, tier, and level fields can lead to a stack-
    based buffer overflow. An attacker could cause an application to crash and may be able to execute code in
    the context of the affected application. (CVE-2026-119777)

Linux/Unix 主機上安裝了一個或多個受到弱點影響的套件，且廠商未提供可用的修補程式。

  - 在 GStreamer 的 gst-plugins-bad H.266/VVC 剖析器中發現缺陷。處理格式錯誤的 H.266 媒體檔案或資料流時，剖析設定檔、層級和層級欄位時的整數溢位可能會導致堆疊型緩衝區溢位。攻擊者可導致應用程式當機，並可能能夠在受影響應用程式的內容中執行程式碼。（CVE-2026-119777）

請注意，Nessus 的判定取決於廠商所報告的套件是否存在。

Linux/Unix 主机中安装的一个或多个程序包受到一个漏洞影响，而供应商没有提供补丁程序。

  - 在 GStreamer 的 gst-plugins-bad H.266/VVC 解析器中发现一个缺陷。在处理畸形 H.266 媒体文件或流时，解析配置文件、层和级别字段时发生一个整数溢出，可导致基于堆栈的缓冲区溢出。攻击者可造成应用程序崩溃，并且可能会在受影响应用程序的上下文中执行代码。（CVE-2026-119777）

请注意，Nessus 依赖供应商报告的程序包是否存在进行判断。

Linux/Unix ホストには、ベンダーが提供するパッチが利用できない脆弱性の影響を受ける複数のパッケージがインストールされています。

  - GStreamer の gst-plugins-bad H.266/VVC パーサーに欠陥が見つかりました。無効な形式の H.266 メディアファイルまたはストリームを処理する場合、プロファイル、階層およびレベルフィールドを解析する際の整数オーバーフローにより、スタックベースのバッファオーバーフローが引き起こされる可能性があります。攻撃者が、アプリケーションをクラッシュすることや、影響を受けるアプリケーションのコンテキストでコードを実行できる可能性があります。(CVE-2026-119777)

Nessus は、ベンダーから報告されたパッケージの存在に依存していることに注意してください。

The remote Redhat Enterprise Linux 10 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2026:98621 advisory.

    GStreamer is a streaming media framework based on graphs of filters which operate on media data. The     gstreamer1-plugins-bad-free package contains a collection of plug-ins for GStreamer.

    Security Fix(es):

    * gstreamer1-plugins-bad-free: gstreamer1-plugins-bad-free: stack buffer overflow in H.266/VVC parser     (CVE-2026-119777)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 10 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2026:99118 advisory.

    GStreamer is a streaming media framework based on graphs of filters which operate on media data. The     gstreamer1-plugins-bad-free package contains a collection of plug-ins for GStreamer.

    Security Fix(es):

    * gstreamer1-plugins-bad-free: gstreamer1-plugins-bad-free: stack buffer overflow in H.266/VVC parser     (CVE-2026-119777)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote RockyLinux 10 host has packages installed that are affected by a vulnerability as referenced in the RLSA-2026:98621 advisory.

    * gstreamer1-plugins-bad-free: gstreamer1-plugins-bad-free: stack buffer overflow in H.266/VVC parser     (CVE-2026-119777)

Tenable has extracted the preceding description block directly from the RockyLinux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - A flaw was found in GStreamer's gst-plugins-bad H.266/VVC parser. When processing a malformed H.266 media     file or stream, an integer overflow while parsing profile, tier, and level fields can lead to a stack-     based buffer overflow. An attacker could cause an application to crash and may be able to execute code in     the context of the affected application. (CVE-2026-119777)

Note that Nessus relies on the presence of the package as reported by the vendor.

The Rocky Linux 10.3 host has packages installed that are affected by a vulnerability as referenced in the CIQ crlsa-2026_98621 advisory.

    * gstreamer1-plugins-bad-free: gstreamer1-plugins-bad-free: stack buffer overflow in H.266/VVC parser     (CVE-2026-119777)

Tenable has extracted the preceding description block directly from the CIQ security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

ID	Name	Product	Family	Published	Updated	Severity
478111	Echo: gst-plugins-bad1.0: security update to 1.26.2-3+deb13u3+e3	Tenable Cloud Security	Echo Local Security Checks	10/31/2026	11/4/2026	high
478111	Echo: gst-plugins-bad1.0: security update to 1.26.2-3+deb13u3+e3	Tenable Self-Hosted Container Security	Echo Local Security Checks	10/31/2026	11/4/2026	high
374310	Linux Distros 未修補弱點：CVE-2026-119777	Nessus	Misc.	10/30/2026	11/4/2026	high
374310	Linux Distros 未修补的漏洞：CVE-2026-119777	Nessus	Misc.	10/30/2026	11/4/2026	high
374310	Linux Distros のパッチ未適用の脆弱性: CVE-2026-119777	Nessus	Misc.	10/30/2026	11/4/2026	high
379089	RHEL 10 : gstreamer1-plugins-bad-free (RHSA-2026:98621)	Nessus	Red Hat Local Security Checks	11/11/2026	11/11/2026	high
379362	RHEL 10 : gstreamer1-plugins-bad-free (RHSA-2026:99118)	Nessus	Red Hat Local Security Checks	11/11/2026	11/11/2026	high
380204	RockyLinux 10 : gstreamer1-plugins-bad-free (RLSA-2026:98621)	Nessus	Rocky Linux Local Security Checks	11/13/2026	11/13/2026	high
374310	Linux Distros Unpatched Vulnerability : CVE-2026-119777	Nessus	Misc.	10/30/2026	11/4/2026	high
381121	Rocky Linux 10.3 [CIQ] Security Update: gstreamer1-plugins-bad-free / gstreamer1-plugins-bad-free-debuginfo / etc (crlsa-2026_98621)	Nessus	Rocky Linux Local Security Checks	11/14/2026	11/14/2026	high

Detections

Analytics

Plugins Search

high

high

high

high

high

high

high

high

high

high