CVE-2026-18297

A flaw was found in GStreamer. This vulnerability, a stack-based buffer overflow, occurs during the parsing of OGG files due to improper validation of user-supplied data length. A remote attacker could exploit this by tricking a user into visiting a malicious page or opening a malicious file, leading to arbitrary code execution within the context of the current process.

Red Hat Product Security rates this vulnerability as Important because exploitation can lead to arbitrary code execution within the context of the active user session, even though it requires victim interaction to handle untrusted input. Default Red Hat Enterprise Linux server deployments do not routinely process audio or video streams, but desktop workstations and applications invoking GStreamer media pipelines remain susceptible when handling untrusted container streams. The blast radius is limited to the privileges of the process executing the parser, and standard SELinux confinement in enforcing mode helps mitigate subsequent unauthorized actions on the host.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.

Users should avoid opening untrusted OGG files or visiting untrusted websites that may serve malicious OGG content. This operational control reduces the risk of exploitation by preventing the processing of specially crafted files.