CVE-2026-17072— Gstreamer1-plugins-good: gst-plugins-good: 4-byte heap over-read in gst_matroska_parse_flac_stream_headers when parsing flac codec data in matroska containers
Quick assessment
Affected
Red Hat Red Hat Enterprise Linux 10
Exploitation
No confirmed in-the-wild exploitation; assess based on exposure
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.
GStreamer是GStreamer组织开源的一套用于处理流媒体的框架。 GStreamer存在缓冲区错误漏洞，该漏洞源于解析嵌入在Matroska或WebM容器文件中的FLAC音频流标头时边界检查不完整，导致堆缓冲区越界读取，可能泄露相邻堆内存。
Possible ATT&CK Techniques 2 AI
T1005 · Data from Local System T1213 · Data from Information RepositoriesAffected Version Matrix 6
| Vendor | Product | Version Range | Status |
|---|---|---|---|
| Red Hat | Red Hat Enterprise Linux 10 | any |
affected |
| Red Hat | Red Hat Enterprise Linux 6 | any |
affected |
| Red Hat | Red Hat Enterprise Linux 7 | any |
affected |
any |
affected | ||
| Red Hat | Red Hat Enterprise Linux 8 | any |
affected |
| Red Hat | Red Hat Enterprise Linux 9 | any |
affected |
Get alerts for future matching vulnerabilities
Log in to subscribe
I. Basic Information for CVE-2026-17072
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
Gstreamer1-plugins-good: gst-plugins-good: 4-byte heap over-read in gst_matroska_parse_flac_stream_headers when parsing flac codec data in matroska containers
Source: CVE Program / CVE List V5
Vulnerability Description
A flaw was found in GStreamer's gst-plugins-good. A heap-based out-of-bounds read of 4 bytes can occur when parsing FLAC audio stream headers embedded in a Matroska or WebM container file. The vulnerability is triggered by a boundary check that does not account for the full size of the data being copied, allowing a small read past the end of the allocated buffer. An attacker could exploit this by crafting a malicious Matroska or WebM file and tricking a user into opening it, potentially leaking a small amount of adjacent heap memory.
Source: CVE Program / CVE List V5
CVSS Information
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N
Source: CVE Program / CVE List V5
Vulnerability Type
跨界内存读
Source: CVE Program / CVE List V5
Vulnerability Title
GStreamer 缓冲区错误漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
GStreamer是GStreamer组织开源的一套用于处理流媒体的框架。 GStreamer存在缓冲区错误漏洞，该漏洞源于解析嵌入在Matroska或WebM容器文件中的FLAC音频流标头时边界检查不完整，导致堆缓冲区越界读取，可能泄露相邻堆内存。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| Red Hat | Red Hat Enterprise Linux 10 | - |
cpe:/o:redhat:enterprise_linux:10
|
|
| Red Hat | Red Hat Enterprise Linux 6 | - |
cpe:/o:redhat:enterprise_linux:6
|
|
| Red Hat | Red Hat Enterprise Linux 7 | - |
cpe:/o:redhat:enterprise_linux:7
|
|
| Red Hat | Red Hat Enterprise Linux 7 | - |
cpe:/o:redhat:enterprise_linux:7
|
|
| Red Hat | Red Hat Enterprise Linux 8 | - |
cpe:/o:redhat:enterprise_linux:8
|
|
| Red Hat | Red Hat Enterprise Linux 9 | - |
cpe:/o:redhat:enterprise_linux:9
|
|
II. Public POCs for CVE-2026-17072
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POC
Premium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2026-17072
请登录查看更多情报信息。
Patches & Fixes for CVE-2026-17072 (1)
Vendor Advisories for CVE-2026-17072 (2)
Same Patch Batch · Red Hat · 2026-07-28 · 5 CVEs total
| CVE-2026-49332 | 8.5 HIGH | Openshift/oauth-proxy: openshift/oauth-proxy: underscore header smuggling enables identity |
| CVE-2026-18107 | 7.8 HIGH | Criu: criu: container escape via rseq critical section hijack during checkpoint/restore |
| CVE-2026-16313 | 7.6 HIGH | Sg3_utils: sg3_utils: arbitrary command execution via udev property injection in sg_inq -- |
| CVE-2026-18047 | 6.5 MEDIUM | Dogtag-pki: pki-core: redhat-pki: pki: acme admin enable/disable endpoint authentication b |
IV. Related Vulnerabilities
Same product: Red Hat Enterprise Linux 10
-
CVE-2026-96512
Sudo: sudo: tz environment variable allows bypass of notbefo -
CVE-2026-96442
Emacs: emacs: arbitrary code execution, incomplete fix for c -
CVE-2026-13087
Kernel: heap out-of-bounds write in the linux kernel rpc-ove -
CVE-2026-90462
Sssd: sssd: fail-open in ldap ppolicy access check allows co -
CVE-2026-94640
Rpcbind: unbounded memory allocation in rpcbind statistics t
Same vendor: Red Hat
-
CVE-2026-96512
Sudo: sudo: tz environment variable allows bypass of notbefo -
CVE-2026-96445
Keycloak-services: keycloak-services: conditional otp skip-h -
CVE-2026-96446
Keycloak-services: keycloak-services: par single-use bypass -
CVE-2026-96442
Emacs: emacs: arbitrary code execution, incomplete fix for c -
CVE-2026-13087
Kernel: heap out-of-bounds write in the linux kernel rpc-ove
Same weakness: CWE-125
-
CVE-2026-79616
Out-of-bounds read vulnerability in Context2D.path and PathS -
CVE-2026-91807
Foxit PDF Editor/Reader PDF File Parsing Out-Of-Bounds Read -
CVE-2026-91808
Foxit PDF Editor/Reader JPEG File Parsing Out-Of-Bounds Read -
CVE-2026-91810
Foxit PDF Editor/Reader Doc Object Out-Of-Bounds Read Inform -
CVE-2026-91817
Foxit PDF Editor/Reader AcroForm Out-of-Bounds Read Remote C
V. Comments for CVE-2026-17072
No comments yet