gst-plugins-good1.0 vulnerabilities
Yazan Balawneh discovered that GStreamer Good Plugins incorrectly handled certain FLAC audio streams. An attacker could possibly use this issue to obtain sensitive information. (CVE-2026-17072) Seonwook Kim discovered that GStreamer Good Plugins incorrectly parsed certain AVI files. An attacker could possibly use this issue to cause a denial of service or obtain sensitive information. (CVE-2026-73433) Seonwook Kim discovered that GStreamer Good Plugins did not correctly parse certain AVI files. An attacker could possibly use this issue to cause a denial of service. (CVE-2026-73434) Seonwook Kim discovered that GStreamer Good Plugins incorrectly handled certain closed caption data. An attacker could possibly use this issue to obtain sensitive information. This issue only affected Ubuntu 20.04 LTS, Ubuntu 22.04 LTS, Ubuntu 24.04 LTS, and Ubuntu 26.04 LTS. (CVE-2026-88914)
USN-8863-1
Primary source · Revision 1
Imported from structured advisory data. Source references identify upstream records or fields; verify affected versions and your deployed configuration.
Security context
Source reference: osv:USN-8863-1
gst-plugins-good1.0
Source reference: /affected/0/package/name
- Affected versions
- 1.6.0-1ubuntu1
Source reference:
/affected/0/versions1.6.1-1ubuntu1Source reference:
/affected/0/versions1.6.2-1ubuntu1Source reference:
/affected/0/versions1.7.1-1ubuntu1Source reference:
/affected/0/versions1.7.2-1ubuntu1Source reference:
/affected/0/versions1.7.90-1ubuntu1Source reference:
/affected/0/versions1.7.91-1ubuntu1Source reference:
/affected/0/versions1.8.0-1ubuntu1Source reference:
/affected/0/versions1.8.1-1ubuntu0.1Source reference:
/affected/0/versions1.8.2-1ubuntu0.1Source reference:
/affected/0/versions1.8.2-1ubuntu0.2Source reference:
/affected/0/versions1.8.2-1ubuntu0.3Source reference:
/affected/0/versions1.8.3-1ubuntu0.3Source reference:
/affected/0/versions1.8.3-1ubuntu0.4Source reference:
/affected/0/versions1.8.3-1ubuntu0.5Source reference:
/affected/0/versions1.8.3-1ubuntu0.5+esm1Source reference:
/affected/0/versions1.8.3-1ubuntu0.5+esm2Source reference:
/affected/0/versions1.8.3-1ubuntu0.5+esm3Source reference:
/affected/0/versions - Fixed versions
- 1.8.3-1ubuntu0.5+esm4
Source reference:
/affected/0/ranges - Prerequisites
- Not stated in this record
gst-plugins-good1.0
Source reference: /affected/1/package/name
- Affected versions
- 1.12.3-1ubuntu1
Source reference:
/affected/1/versions1.12.4-1ubuntu1Source reference:
/affected/1/versions1.13.1-1ubuntu1Source reference:
/affected/1/versions1.13.91-1ubuntu1Source reference:
/affected/1/versions1.14.0-1ubuntu1Source reference:
/affected/1/versions1.14.1-1ubuntu1~ubuntu18.04.1Source reference:
/affected/1/versions1.14.4-1ubuntu1~ubuntu18.04.1Source reference:
/affected/1/versions1.14.5-0ubuntu1~18.04.1Source reference:
/affected/1/versions1.14.5-0ubuntu1~18.04.2Source reference:
/affected/1/versions1.14.5-0ubuntu1~18.04.3Source reference:
/affected/1/versions1.14.5-0ubuntu1~18.04.3+esm1Source reference:
/affected/1/versions1.14.5-0ubuntu1~18.04.3+esm2Source reference:
/affected/1/versions1.14.5-0ubuntu1~18.04.3+esm3Source reference:
/affected/1/versions - Fixed versions
- 1.14.5-0ubuntu1~18.04.3+esm4
Source reference:
/affected/1/ranges - Prerequisites
- Not stated in this record
gst-plugins-good1.0
Source reference: /affected/2/package/name
- Affected versions
- 1.16.1-1ubuntu1
Source reference:
/affected/2/versions1.16.2-1ubuntu1Source reference:
/affected/2/versions1.16.2-1ubuntu2Source reference:
/affected/2/versions1.16.2-1ubuntu2.1Source reference:
/affected/2/versions1.16.3-0ubuntu1Source reference:
/affected/2/versions1.16.3-0ubuntu1.1Source reference:
/affected/2/versions1.16.3-0ubuntu1.2Source reference:
/affected/2/versions1.16.3-0ubuntu1.3Source reference:
/affected/2/versions1.16.3-0ubuntu1.3+esm1Source reference:
/affected/2/versions1.16.3-0ubuntu1.3+esm2Source reference:
/affected/2/versions1.16.3-0ubuntu1.3+esm3Source reference:
/affected/2/versions - Fixed versions
- 1.16.3-0ubuntu1.3+esm4
Source reference:
/affected/2/ranges - Prerequisites
- Not stated in this record
gst-plugins-good1.0
Source reference: /affected/3/package/name
- Affected versions
- 1.18.5-1ubuntu2
Source reference:
/affected/3/versions1.18.5-1ubuntu3Source reference:
/affected/3/versions1.20.0-2ubuntu1Source reference:
/affected/3/versions1.20.1-1ubuntu1Source reference:
/affected/3/versions1.20.3-0ubuntu1Source reference:
/affected/3/versions1.20.3-0ubuntu1.1Source reference:
/affected/3/versions1.20.3-0ubuntu1.3Source reference:
/affected/3/versions1.20.3-0ubuntu1.4Source reference:
/affected/3/versions1.20.3-0ubuntu1.5Source reference:
/affected/3/versions1.20.3-0ubuntu1.6Source reference:
/affected/3/versions1.20.3-0ubuntu1.7Source reference:
/affected/3/versions1.20.3-0ubuntu1.8Source reference:
/affected/3/versions1.20.3-0ubuntu1.9Source reference:
/affected/3/versions - Fixed versions
- 1.20.3-0ubuntu1.10
Source reference:
/affected/3/ranges - Prerequisites
- Not stated in this record
gst-plugins-good1.0
Source reference: /affected/4/package/name
- Affected versions
- 1.22.6-1ubuntu1
Source reference:
/affected/4/versions1.22.6-1ubuntu2Source reference:
/affected/4/versions1.22.8-3ubuntu1Source reference:
/affected/4/versions1.22.9-1ubuntu1Source reference:
/affected/4/versions1.24.0-1ubuntu5Source reference:
/affected/4/versions1.24.0-1ubuntu7Source reference:
/affected/4/versions1.24.1-2ubuntu1Source reference:
/affected/4/versions1.24.2-1ubuntu1Source reference:
/affected/4/versions1.24.2-1ubuntu1.1Source reference:
/affected/4/versions1.24.2-1ubuntu1.2Source reference:
/affected/4/versions1.24.2-1ubuntu1.3Source reference:
/affected/4/versions1.24.2-1ubuntu1.4Source reference:
/affected/4/versions1.24.2-1ubuntu1.5Source reference:
/affected/4/versions1.24.2-1ubuntu1.6Source reference:
/affected/4/versions1.24.2-1ubuntu1.7Source reference:
/affected/4/versions - Fixed versions
- 1.24.2-1ubuntu1.8
Source reference:
/affected/4/ranges - Prerequisites
- Not stated in this record
gst-plugins-good1.0
Source reference: /affected/5/package/name
- Affected versions
- 1.26.5-1ubuntu2
Source reference:
/affected/5/versions1.27.2-1ubuntu1Source reference:
/affected/5/versions1.27.90-1ubuntu1Source reference:
/affected/5/versions1.28.0-1ubuntu1Source reference:
/affected/5/versions1.28.0-1ubuntu3Source reference:
/affected/5/versions1.28.1-1ubuntu1Source reference:
/affected/5/versions1.28.2-2Source reference:
/affected/5/versions1.28.2-2ubuntu0.1Source reference:
/affected/5/versions1.28.2-2ubuntu0.2Source reference:
/affected/5/versions1.28.2-2ubuntu0.3Source reference:
/affected/5/versions - Fixed versions
- 1.28.2-2ubuntu0.4
Source reference:
/affected/5/ranges - Prerequisites
- Not stated in this record
Structured affected-version data
Original package identities and version rules from this source.
[
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "1.8.3-1ubuntu0.5+esm4"
}
]
}
],
"package": {
"name": "gst-plugins-good1.0",
"purl": "pkg:deb/ubuntu/gst-plugins-good1.0?arch=source&distro=esm-infra-legacy%2Fxenial",
"ecosystem": "Ubuntu:Pro:16.04:LTS"
},
"versions": [
"1.6.0-1ubuntu1",
"1.6.1-1ubuntu1",
"1.6.2-1ubuntu1",
"1.7.1-1ubuntu1",
"1.7.2-1ubuntu1",
"1.7.90-1ubuntu1",
"1.7.91-1ubuntu1",
"1.8.0-1ubuntu1",
"1.8.1-1ubuntu0.1",
"1.8.2-1ubuntu0.1",
"1.8.2-1ubuntu0.2",
"1.8.2-1ubuntu0.3",
"1.8.3-1ubuntu0.3",
"1.8.3-1ubuntu0.4",
"1.8.3-1ubuntu0.5",
"1.8.3-1ubuntu0.5+esm1",
"1.8.3-1ubuntu0.5+esm2",
"1.8.3-1ubuntu0.5+esm3"
],
"database_specific": {
"source": "https://github.com/canonical/ubuntu-security-notices/blob/main/osv/usn/USN-8863-1.json",
"cves_map": {
"cves": [
{
"id": "CVE-2026-17072",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N"
},
{
"type": "Ubuntu",
"score": "medium"
}
]
},
{
"id": "CVE-2026-73433",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:H"
},
{
"type": "Ubuntu",
"score": "medium"
}
]
},
{
"id": "CVE-2026-73434",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:H"
},
{
"type": "Ubuntu",
"score": "medium"
}
]
}
],
"ecosystem": "Ubuntu:Pro:16.04:LTS"
}
},
"ecosystem_specific": {
"binaries": [
{
"binary_name": "gstreamer1.0-plugins-good",
"binary_version": "1.8.3-1ubuntu0.5+esm4"
},
{
"binary_name": "gstreamer1.0-pulseaudio",
"binary_version": "1.8.3-1ubuntu0.5+esm4"
},
{
"binary_name": "libgstreamer-plugins-good1.0-0",
"binary_version": "1.8.3-1ubuntu0.5+esm4"
}
],
"availability": "Available with Ubuntu Pro with Legacy support add-on: https://ubuntu.com/pro"
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "1.14.5-0ubuntu1~18.04.3+esm4"
}
]
}
],
"package": {
"name": "gst-plugins-good1.0",
"purl": "pkg:deb/ubuntu/gst-plugins-good1.0?arch=source&distro=esm-infra%2Fbionic",
"ecosystem": "Ubuntu:Pro:18.04:LTS"
},
"versions": [
"1.12.3-1ubuntu1",
"1.12.4-1ubuntu1",
"1.13.1-1ubuntu1",
"1.13.91-1ubuntu1",
"1.14.0-1ubuntu1",
"1.14.1-1ubuntu1~ubuntu18.04.1",
"1.14.4-1ubuntu1~ubuntu18.04.1",
"1.14.5-0ubuntu1~18.04.1",
"1.14.5-0ubuntu1~18.04.2",
"1.14.5-0ubuntu1~18.04.3",
"1.14.5-0ubuntu1~18.04.3+esm1",
"1.14.5-0ubuntu1~18.04.3+esm2",
"1.14.5-0ubuntu1~18.04.3+esm3"
],
"database_specific": {
"source": "https://github.com/canonical/ubuntu-security-notices/blob/main/osv/usn/USN-8863-1.json",
"cves_map": {
"cves": [
{
"id": "CVE-2026-17072",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N"
},
{
"type": "Ubuntu",
"score": "medium"
}
]
},
{
"id": "CVE-2026-73433",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:H"
},
{
"type": "Ubuntu",
"score": "medium"
}
]
},
{
"id": "CVE-2026-73434",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:H"
},
{
"type": "Ubuntu",
"score": "medium"
}
]
}
],
"ecosystem": "Ubuntu:Pro:18.04:LTS"
}
},
"ecosystem_specific": {
"binaries": [
{
"binary_name": "gstreamer1.0-gtk3",
"binary_version": "1.14.5-0ubuntu1~18.04.3+esm4"
},
{
"binary_name": "gstreamer1.0-plugins-good",
"binary_version": "1.14.5-0ubuntu1~18.04.3+esm4"
},
{
"binary_name": "gstreamer1.0-pulseaudio",
"binary_version": "1.14.5-0ubuntu1~18.04.3+esm4"
},
{
"binary_name": "gstreamer1.0-qt5",
"binary_version": "1.14.5-0ubuntu1~18.04.3+esm4"
},
{
"binary_name": "libgstreamer-plugins-good1.0-0",
"binary_version": "1.14.5-0ubuntu1~18.04.3+esm4"
}
],
"availability": "Available with Ubuntu Pro (Infra-only): https://ubuntu.com/pro"
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "1.16.3-0ubuntu1.3+esm4"
}
]
}
],
"package": {
"name": "gst-plugins-good1.0",
"purl": "pkg:deb/ubuntu/gst-plugins-good1.0?arch=source&distro=esm-infra%2Ffocal",
"ecosystem": "Ubuntu:Pro:20.04:LTS"
},
"versions": [
"1.16.1-1ubuntu1",
"1.16.2-1ubuntu1",
"1.16.2-1ubuntu2",
"1.16.2-1ubuntu2.1",
"1.16.3-0ubuntu1",
"1.16.3-0ubuntu1.1",
"1.16.3-0ubuntu1.2",
"1.16.3-0ubuntu1.3",
"1.16.3-0ubuntu1.3+esm1",
"1.16.3-0ubuntu1.3+esm2",
"1.16.3-0ubuntu1.3+esm3"
],
"database_specific": {
"source": "https://github.com/canonical/ubuntu-security-notices/blob/main/osv/usn/USN-8863-1.json",
"cves_map": {
"cves": [
{
"id": "CVE-2026-17072",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N"
},
{
"type": "Ubuntu",
"score": "medium"
}
]
},
{
"id": "CVE-2026-73433",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:H"
},
{
"type": "Ubuntu",
"score": "medium"
}
]
},
{
"id": "CVE-2026-73434",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:H"
},
{
"type": "Ubuntu",
"score": "medium"
}
]
},
{
"id": "CVE-2026-88914",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:L"
},
{
"type": "Ubuntu",
"score": "medium"
}
]
}
],
"ecosystem": "Ubuntu:Pro:20.04:LTS"
}
},
"ecosystem_specific": {
"binaries": [
{
"binary_name": "gstreamer1.0-gtk3",
"binary_version": "1.16.3-0ubuntu1.3+esm4"
},
{
"binary_name": "gstreamer1.0-plugins-good",
"binary_version": "1.16.3-0ubuntu1.3+esm4"
},
{
"binary_name": "gstreamer1.0-pulseaudio",
"binary_version": "1.16.3-0ubuntu1.3+esm4"
},
{
"binary_name": "gstreamer1.0-qt5",
"binary_version": "1.16.3-0ubuntu1.3+esm4"
},
{
"binary_name": "libgstreamer-plugins-good1.0-0",
"binary_version": "1.16.3-0ubuntu1.3+esm4"
}
],
"availability": "Available with Ubuntu Pro (Infra-only): https://ubuntu.com/pro"
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "1.20.3-0ubuntu1.10"
}
]
}
],
"package": {
"name": "gst-plugins-good1.0",
"purl": "pkg:deb/ubuntu/gst-plugins-good1.0?arch=source&distro=jammy",
"ecosystem": "Ubuntu:22.04:LTS"
},
"versions": [
"1.18.5-1ubuntu2",
"1.18.5-1ubuntu3",
"1.20.0-2ubuntu1",
"1.20.1-1ubuntu1",
"1.20.3-0ubuntu1",
"1.20.3-0ubuntu1.1",
"1.20.3-0ubuntu1.3",
"1.20.3-0ubuntu1.4",
"1.20.3-0ubuntu1.5",
"1.20.3-0ubuntu1.6",
"1.20.3-0ubuntu1.7",
"1.20.3-0ubuntu1.8",
"1.20.3-0ubuntu1.9"
],
"database_specific": {
"source": "https://github.com/canonical/ubuntu-security-notices/blob/main/osv/usn/USN-8863-1.json",
"cves_map": {
"cves": [
{
"id": "CVE-2026-17072",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N"
},
{
"type": "Ubuntu",
"score": "medium"
}
]
},
{
"id": "CVE-2026-73433",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:H"
},
{
"type": "Ubuntu",
"score": "medium"
}
]
},
{
"id": "CVE-2026-73434",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:H"
},
{
"type": "Ubuntu",
"score": "medium"
}
]
},
{
"id": "CVE-2026-88914",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:L"
},
{
"type": "Ubuntu",
"score": "medium"
}
]
}
],
"ecosystem": "Ubuntu:22.04:LTS"
}
},
"ecosystem_specific": {
"binaries": [
{
"binary_name": "gstreamer1.0-gtk3",
"binary_version": "1.20.3-0ubuntu1.10"
},
{
"binary_name": "gstreamer1.0-plugins-good",
"binary_version": "1.20.3-0ubuntu1.10"
},
{
"binary_name": "gstreamer1.0-pulseaudio",
"binary_version": "1.20.3-0ubuntu1.10"
},
{
"binary_name": "gstreamer1.0-qt5",
"binary_version": "1.20.3-0ubuntu1.10"
},
{
"binary_name": "libgstreamer-plugins-good1.0-0",
"binary_version": "1.20.3-0ubuntu1.10"
}
],
"availability": "No subscription required"
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "1.24.2-1ubuntu1.8"
}
]
}
],
"package": {
"name": "gst-plugins-good1.0",
"purl": "pkg:deb/ubuntu/gst-plugins-good1.0?arch=source&distro=noble",
"ecosystem": "Ubuntu:24.04:LTS"
},
"versions": [
"1.22.6-1ubuntu1",
"1.22.6-1ubuntu2",
"1.22.8-3ubuntu1",
"1.22.9-1ubuntu1",
"1.24.0-1ubuntu5",
"1.24.0-1ubuntu7",
"1.24.1-2ubuntu1",
"1.24.2-1ubuntu1",
"1.24.2-1ubuntu1.1",
"1.24.2-1ubuntu1.2",
"1.24.2-1ubuntu1.3",
"1.24.2-1ubuntu1.4",
"1.24.2-1ubuntu1.5",
"1.24.2-1ubuntu1.6",
"1.24.2-1ubuntu1.7"
],
"database_specific": {
"source": "https://github.com/canonical/ubuntu-security-notices/blob/main/osv/usn/USN-8863-1.json",
"cves_map": {
"cves": [
{
"id": "CVE-2026-17072",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N"
},
{
"type": "Ubuntu",
"score": "medium"
}
]
},
{
"id": "CVE-2026-73433",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:H"
},
{
"type": "Ubuntu",
"score": "medium"
}
]
},
{
"id": "CVE-2026-73434",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:H"
},
{
"type": "Ubuntu",
"score": "medium"
}
]
},
{
"id": "CVE-2026-88914",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:L"
},
{
"type": "Ubuntu",
"score": "medium"
}
]
}
],
"ecosystem": "Ubuntu:24.04:LTS"
}
},
"ecosystem_specific": {
"binaries": [
{
"binary_name": "gstreamer1.0-gtk3",
"binary_version": "1.24.2-1ubuntu1.8"
},
{
"binary_name": "gstreamer1.0-plugins-good",
"binary_version": "1.24.2-1ubuntu1.8"
},
{
"binary_name": "gstreamer1.0-pulseaudio",
"binary_version": "1.24.2-1ubuntu1.8"
},
{
"binary_name": "gstreamer1.0-qt5",
"binary_version": "1.24.2-1ubuntu1.8"
},
{
"binary_name": "gstreamer1.0-qt6",
"binary_version": "1.24.2-1ubuntu1.8"
},
{
"binary_name": "libgstreamer-plugins-good1.0-0",
"binary_version": "1.24.2-1ubuntu1.8"
}
],
"availability": "No subscription required"
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "1.28.2-2ubuntu0.4"
}
]
}
],
"package": {
"name": "gst-plugins-good1.0",
"purl": "pkg:deb/ubuntu/gst-plugins-good1.0?arch=source&distro=resolute",
"ecosystem": "Ubuntu:26.04:LTS"
},
"versions": [
"1.26.5-1ubuntu2",
"1.27.2-1ubuntu1",
"1.27.90-1ubuntu1",
"1.28.0-1ubuntu1",
"1.28.0-1ubuntu3",
"1.28.1-1ubuntu1",
"1.28.2-2",
"1.28.2-2ubuntu0.1",
"1.28.2-2ubuntu0.2",
"1.28.2-2ubuntu0.3"
],
"database_specific": {
"source": "https://github.com/canonical/ubuntu-security-notices/blob/main/osv/usn/USN-8863-1.json",
"cves_map": {
"cves": [
{
"id": "CVE-2026-17072",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N"
},
{
"type": "Ubuntu",
"score": "medium"
}
]
},
{
"id": "CVE-2026-73433",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:H"
},
{
"type": "Ubuntu",
"score": "medium"
}
]
},
{
"id": "CVE-2026-73434",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:H"
},
{
"type": "Ubuntu",
"score": "medium"
}
]
},
{
"id": "CVE-2026-88914",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:L"
},
{
"type": "Ubuntu",
"score": "medium"
}
]
}
],
"ecosystem": "Ubuntu:26.04:LTS"
}
},
"ecosystem_specific": {
"binaries": [
{
"binary_name": "gstreamer1.0-gtk3",
"binary_version": "1.28.2-2ubuntu0.4"
},
{
"binary_name": "gstreamer1.0-plugins-good",
"binary_version": "1.28.2-2ubuntu0.4"
},
{
"binary_name": "gstreamer1.0-pulseaudio",
"binary_version": "1.28.2-2ubuntu0.4"
},
{
"binary_name": "gstreamer1.0-qt5",
"binary_version": "1.28.2-2ubuntu0.4"
},
{
"binary_name": "gstreamer1.0-qt6",
"binary_version": "1.28.2-2ubuntu0.4"
}
],
"availability": "No subscription required"
}
}
]- Related CVEs
- CVE-2026-17072
Source reference:
/upstreamCVE-2026-73433Source reference:
/upstreamCVE-2026-73434Source reference:
/upstreamCVE-2026-88914Source reference:
/upstream
Publisher severity
No explicit severity was provided.
- Event
- #67607 · Revision 1
- Added to Heist Feed
- Publisher date