CVE-2026-3083 - Vulnerability Analysis
HighCVSS: 8.8Last Updated: March 16, 2026
GStreamer - Remote Code Execution
Published: March 16, 2026Updated: March 16, 2026Remote Exploitable
Overview
GStreamer contains a remote code execution caused by an out-of-bounds write in rtpqdm2depay element processing, letting remote attackers execute arbitrary code, exploit requires interaction with the library.
Severity & Score
Severity: High
CVSS Score: 8.8
Impact
Remote attackers can execute arbitrary code in the context of the current process, potentially leading to full system compromise.
Mitigation
Update to the latest version of GStreamer.
References
Related Resources
Details
- CVE ID
- CVE-2026-3083
- Severity
- High
- CVSS Score
- 8.8
- Type
- buffer_overflow
- Status
- unconfirmed
CWE
- CWE-129
CVSS Metrics
CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H