CVE-2026-3085 - Vulnerability Analysis
HighCVSS: 8.8Last Updated: March 16, 2026
GStreamer - Remote Code Execution
Published: March 16, 2026Updated: March 16, 2026Remote Exploitable
Overview
GStreamer contains a heap-based buffer overflow caused by improper validation of user-supplied data length in X-QDM RTP payload processing, letting remote attackers execute arbitrary code, exploit requires interaction with the library.
Severity & Score
Severity: High
CVSS Score: 8.8
Impact
Remote attackers can execute arbitrary code in the context of the current process, potentially leading to full system compromise.
Mitigation
Update to the latest version of GStreamer.
References
Related Resources
Details
- CVE ID
- CVE-2026-3085
- Severity
- High
- CVSS Score
- 8.8
- Type
- buffer_overflow
- Status
- unconfirmed
CWE
- CWE-122
CVSS Metrics
CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H