CVE-2021-3185: Freedesktop Gst-Plugins-Bad

Critical severity, CVSS 9.8. EPSS: 2.4% chance of exploitation in the next 30 days.

A flaw was found in the gstreamer h264 component of gst-plugins-bad before v1.18.1 where when parsing a h264 header, an attacker could cause the stack to be smashed, memory corruption and possibly code execution.

Affected products

• Freedesktop Gst-Plugins-Bad: before 1.18.1 (fixed in 1.18.1)

Published 2021-01-26. Last modified 2026-06-17.