Track vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
GStreamer JPEG decoder can read beyond file data, causing crash
published 4 months ago
Summary
The GStreamer video processing library's JPEG decoder may read past the end of a specially crafted image file. This can make the program stop working or reveal data it shouldn't. Update the GStreamer software as soon as a patch is released and avoid opening JPEG files from untrusted sources.
What to do
- Update echo gst-plugins-bad1.0 to version 1.26.2-3+deb13u2.
Affected software
| Ecosystem | Vendor | Product | Affected versions |
|---|---|---|---|
| Echo | echo | gst-plugins-bad1.0 |
< 1.26.2-3+deb13u2 Fix: upgrade to 1.26.2-3+deb13u2
|
Original advisory text
ECHO-c6e4-fb80-f88a
References
Timeline
Published21 Jun 2026
Updated15 Jul 2026
First seen15 Jul 2026
Sources
ECHO-c6e4-fb80-f88a · OSV
Track software like this
Free during beta