{"schema":"vulnpedia.research/1","cve":"CVE-2026-3085","references":[{"url":"https://www.zerodayinitiative.com/advisories/ZDI-26-167/","tags":["x_research-advisory","Third Party Advisory","vendor-reference"],"source":"mitre","sourceId":"zdi","modified":"2026-03-13T20:40:02.186Z","origins":[{"source":"mitre","sourceId":"zdi","modified":"2026-03-13T20:40:02.186Z","url":"https://www.zerodayinitiative.com/advisories/ZDI-26-167/"},{"source":"nvd","sourceId":"CVE-2026-3085","modified":"2026-07-21T12:18:25.753","url":"https://www.zerodayinitiative.com/advisories/ZDI-26-167/"},{"source":"redhat","sourceId":"CVE-2026-3085","modified":"2026-07-20T19:06:56+00:00","url":"https://www.zerodayinitiative.com/advisories/ZDI-26-167/"}]},{"url":"https://gitlab.freedesktop.org/gstreamer/gstreamer/-/commit/d60a94dee3c0a0942c9981491bf83e0de1900fbf","tags":["vendor-advisory","Vendor Advisory","vendor-reference"],"source":"mitre","sourceId":"zdi","modified":"2026-03-13T20:40:02.186Z","origins":[{"source":"mitre","sourceId":"zdi","modified":"2026-03-13T20:40:02.186Z","url":"https://gitlab.freedesktop.org/gstreamer/gstreamer/-/commit/d60a94dee3c0a0942c9981491bf83e0de1900fbf"},{"source":"nvd","sourceId":"CVE-2026-3085","modified":"2026-07-21T12:18:25.753","url":"https://gitlab.freedesktop.org/gstreamer/gstreamer/-/commit/d60a94dee3c0a0942c9981491bf83e0de1900fbf"},{"source":"redhat","sourceId":"CVE-2026-3085","modified":"2026-07-20T19:06:56+00:00","url":"https://gitlab.freedesktop.org/gstreamer/gstreamer/-/commit/d60a94dee3c0a0942c9981491bf83e0de1900fbf"}]},{"url":"https://access.redhat.com/security/cve/CVE-2026-3085","tags":["vdb-entry","x_refsource_REDHAT","vendor-reference"],"source":"mitre","sourceId":"redhat-SADP","modified":"2026-07-21T12:05:03.584Z","origins":[{"source":"mitre","sourceId":"redhat-SADP","modified":"2026-07-21T12:05:03.584Z","url":"https://access.redhat.com/security/cve/CVE-2026-3085"},{"source":"nvd","sourceId":"CVE-2026-3085","modified":"2026-07-21T12:18:25.753","url":"https://access.redhat.com/security/cve/CVE-2026-3085"},{"source":"redhat","sourceId":"CVE-2026-3085","modified":"2026-07-20T19:06:56+00:00","url":"https://access.redhat.com/security/cve/CVE-2026-3085"}]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2447495","tags":["issue-tracking","x_refsource_REDHAT","vendor-reference"],"source":"mitre","sourceId":"redhat-SADP","modified":"2026-07-21T12:05:03.584Z","origins":[{"source":"mitre","sourceId":"redhat-SADP","modified":"2026-07-21T12:05:03.584Z","url":"https://bugzilla.redhat.com/show_bug.cgi?id=2447495"},{"source":"nvd","sourceId":"CVE-2026-3085","modified":"2026-07-21T12:18:25.753","url":"https://bugzilla.redhat.com/show_bug.cgi?id=2447495"},{"source":"redhat","sourceId":"CVE-2026-3085","modified":"2026-07-20T19:06:56+00:00","url":"https://bugzilla.redhat.com/show_bug.cgi?id=2447495"}]},{"url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-3085.json","tags":["x_sadp-csaf-vex","vendor-advisory"],"source":"mitre","sourceId":"redhat-SADP","modified":"2026-07-21T12:05:03.584Z","origins":[{"source":"mitre","sourceId":"redhat-SADP","modified":"2026-07-21T12:05:03.584Z","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-3085.json"},{"source":"nvd","sourceId":"CVE-2026-3085","modified":"2026-07-21T12:18:25.753","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-3085.json"},{"source":"redhat","sourceId":"CVE-2026-3085","modified":"2026-07-20T19:06:56+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-3085.json"}]},{"url":"https://access.redhat.com/errata/RHSA-2026:7850","tags":["vendor-advisory","x_refsource_REDHAT","vendor-remediation"],"source":"mitre","sourceId":"redhat-SADP","modified":"2026-07-21T12:05:03.584Z","origins":[{"source":"mitre","sourceId":"redhat-SADP","modified":"2026-07-21T12:05:03.584Z","url":"https://access.redhat.com/errata/RHSA-2026:7850"},{"source":"nvd","sourceId":"CVE-2026-3085","modified":"2026-07-21T12:18:25.753","url":"https://access.redhat.com/errata/RHSA-2026:7850"},{"source":"redhat","sourceId":"CVE-2026-3085","modified":"2026-07-20T19:06:56+00:00","url":"https://access.redhat.com/errata/RHSA-2026:7850"}]},{"url":"https://access.redhat.com/errata/RHSA-2026:7673","tags":["vendor-advisory","x_refsource_REDHAT","vendor-remediation"],"source":"mitre","sourceId":"redhat-SADP","modified":"2026-07-21T12:05:03.584Z","origins":[{"source":"mitre","sourceId":"redhat-SADP","modified":"2026-07-21T12:05:03.584Z","url":"https://access.redhat.com/errata/RHSA-2026:7673"},{"source":"nvd","sourceId":"CVE-2026-3085","modified":"2026-07-21T12:18:25.753","url":"https://access.redhat.com/errata/RHSA-2026:7673"},{"source":"redhat","sourceId":"CVE-2026-3085","modified":"2026-07-20T19:06:56+00:00","url":"https://access.redhat.com/errata/RHSA-2026:7673"}]},{"url":"https://access.redhat.com/errata/RHSA-2026:8854","tags":["vendor-advisory","x_refsource_REDHAT","vendor-remediation"],"source":"mitre","sourceId":"redhat-SADP","modified":"2026-07-21T12:05:03.584Z","origins":[{"source":"mitre","sourceId":"redhat-SADP","modified":"2026-07-21T12:05:03.584Z","url":"https://access.redhat.com/errata/RHSA-2026:8854"},{"source":"nvd","sourceId":"CVE-2026-3085","modified":"2026-07-21T12:18:25.753","url":"https://access.redhat.com/errata/RHSA-2026:8854"},{"source":"redhat","sourceId":"CVE-2026-3085","modified":"2026-07-20T19:06:56+00:00","url":"https://access.redhat.com/errata/RHSA-2026:8854"}]},{"url":"https://access.redhat.com/errata/RHSA-2026:6259","tags":["vendor-advisory","x_refsource_REDHAT","vendor-remediation"],"source":"mitre","sourceId":"redhat-SADP","modified":"2026-07-21T12:05:03.584Z","origins":[{"source":"mitre","sourceId":"redhat-SADP","modified":"2026-07-21T12:05:03.584Z","url":"https://access.redhat.com/errata/RHSA-2026:6259"},{"source":"nvd","sourceId":"CVE-2026-3085","modified":"2026-07-21T12:18:25.753","url":"https://access.redhat.com/errata/RHSA-2026:6259"},{"source":"redhat","sourceId":"CVE-2026-3085","modified":"2026-07-20T19:06:56+00:00","url":"https://access.redhat.com/errata/RHSA-2026:6259"}]},{"url":"https://access.redhat.com/errata/RHSA-2026:19024","tags":["vendor-advisory","x_refsource_REDHAT","vendor-remediation"],"source":"mitre","sourceId":"redhat-SADP","modified":"2026-07-21T12:05:03.584Z","origins":[{"source":"mitre","sourceId":"redhat-SADP","modified":"2026-07-21T12:05:03.584Z","url":"https://access.redhat.com/errata/RHSA-2026:19024"},{"source":"nvd","sourceId":"CVE-2026-3085","modified":"2026-07-21T12:18:25.753","url":"https://access.redhat.com/errata/RHSA-2026:19024"},{"source":"redhat","sourceId":"CVE-2026-3085","modified":"2026-07-20T19:06:56+00:00","url":"https://access.redhat.com/errata/RHSA-2026:19024"}]},{"url":"https://access.redhat.com/errata/RHSA-2026:6750","tags":["vendor-advisory","x_refsource_REDHAT","vendor-remediation"],"source":"mitre","sourceId":"redhat-SADP","modified":"2026-07-21T12:05:03.584Z","origins":[{"source":"mitre","sourceId":"redhat-SADP","modified":"2026-07-21T12:05:03.584Z","url":"https://access.redhat.com/errata/RHSA-2026:6750"},{"source":"nvd","sourceId":"CVE-2026-3085","modified":"2026-07-21T12:18:25.753","url":"https://access.redhat.com/errata/RHSA-2026:6750"},{"source":"redhat","sourceId":"CVE-2026-3085","modified":"2026-07-20T19:06:56+00:00","url":"https://access.redhat.com/errata/RHSA-2026:6750"}]},{"url":"https://access.redhat.com/errata/RHSA-2026:9487","tags":["vendor-advisory","x_refsource_REDHAT","vendor-remediation"],"source":"mitre","sourceId":"redhat-SADP","modified":"2026-07-21T12:05:03.584Z","origins":[{"source":"mitre","sourceId":"redhat-SADP","modified":"2026-07-21T12:05:03.584Z","url":"https://access.redhat.com/errata/RHSA-2026:9487"},{"source":"nvd","sourceId":"CVE-2026-3085","modified":"2026-07-21T12:18:25.753","url":"https://access.redhat.com/errata/RHSA-2026:9487"},{"source":"redhat","sourceId":"CVE-2026-3085","modified":"2026-07-20T19:06:56+00:00","url":"https://access.redhat.com/errata/RHSA-2026:9487"}]},{"url":"https://access.redhat.com/errata/RHSA-2026:9446","tags":["vendor-advisory","x_refsource_REDHAT","vendor-remediation"],"source":"mitre","sourceId":"redhat-SADP","modified":"2026-07-21T12:05:03.584Z","origins":[{"source":"mitre","sourceId":"redhat-SADP","modified":"2026-07-21T12:05:03.584Z","url":"https://access.redhat.com/errata/RHSA-2026:9446"},{"source":"nvd","sourceId":"CVE-2026-3085","modified":"2026-07-21T12:18:25.753","url":"https://access.redhat.com/errata/RHSA-2026:9446"},{"source":"redhat","sourceId":"CVE-2026-3085","modified":"2026-07-20T19:06:56+00:00","url":"https://access.redhat.com/errata/RHSA-2026:9446"}]},{"url":"https://access.redhat.com/errata/RHSA-2026:9447","tags":["vendor-advisory","x_refsource_REDHAT","vendor-remediation"],"source":"mitre","sourceId":"redhat-SADP","modified":"2026-07-21T12:05:03.584Z","origins":[{"source":"mitre","sourceId":"redhat-SADP","modified":"2026-07-21T12:05:03.584Z","url":"https://access.redhat.com/errata/RHSA-2026:9447"},{"source":"nvd","sourceId":"CVE-2026-3085","modified":"2026-07-21T12:18:25.753","url":"https://access.redhat.com/errata/RHSA-2026:9447"},{"source":"redhat","sourceId":"CVE-2026-3085","modified":"2026-07-20T19:06:56+00:00","url":"https://access.redhat.com/errata/RHSA-2026:9447"}]},{"url":"https://access.redhat.com/errata/RHSA-2026:9488","tags":["vendor-advisory","x_refsource_REDHAT","vendor-remediation"],"source":"mitre","sourceId":"redhat-SADP","modified":"2026-07-21T12:05:03.584Z","origins":[{"source":"mitre","sourceId":"redhat-SADP","modified":"2026-07-21T12:05:03.584Z","url":"https://access.redhat.com/errata/RHSA-2026:9488"},{"source":"nvd","sourceId":"CVE-2026-3085","modified":"2026-07-21T12:18:25.753","url":"https://access.redhat.com/errata/RHSA-2026:9488"},{"source":"redhat","sourceId":"CVE-2026-3085","modified":"2026-07-20T19:06:56+00:00","url":"https://access.redhat.com/errata/RHSA-2026:9488"}]},{"url":"https://access.redhat.com/errata/RHSA-2026:8876","tags":["vendor-advisory","x_refsource_REDHAT","vendor-remediation"],"source":"mitre","sourceId":"redhat-SADP","modified":"2026-07-21T12:05:03.584Z","origins":[{"source":"mitre","sourceId":"redhat-SADP","modified":"2026-07-21T12:05:03.584Z","url":"https://access.redhat.com/errata/RHSA-2026:8876"},{"source":"nvd","sourceId":"CVE-2026-3085","modified":"2026-07-21T12:18:25.753","url":"https://access.redhat.com/errata/RHSA-2026:8876"},{"source":"redhat","sourceId":"CVE-2026-3085","modified":"2026-07-20T19:06:56+00:00","url":"https://access.redhat.com/errata/RHSA-2026:8876"}]},{"url":"https://access.redhat.com/errata/RHSA-2026:8874","tags":["vendor-advisory","x_refsource_REDHAT","vendor-remediation"],"source":"mitre","sourceId":"redhat-SADP","modified":"2026-07-21T12:05:03.584Z","origins":[{"source":"mitre","sourceId":"redhat-SADP","modified":"2026-07-21T12:05:03.584Z","url":"https://access.redhat.com/errata/RHSA-2026:8874"},{"source":"nvd","sourceId":"CVE-2026-3085","modified":"2026-07-21T12:18:25.753","url":"https://access.redhat.com/errata/RHSA-2026:8874"},{"source":"redhat","sourceId":"CVE-2026-3085","modified":"2026-07-20T19:06:56+00:00","url":"https://access.redhat.com/errata/RHSA-2026:8874"}]},{"url":"https://access.redhat.com/errata/RHSA-2026:8857","tags":["vendor-advisory","x_refsource_REDHAT","vendor-remediation"],"source":"mitre","sourceId":"redhat-SADP","modified":"2026-07-21T12:05:03.584Z","origins":[{"source":"mitre","sourceId":"redhat-SADP","modified":"2026-07-21T12:05:03.584Z","url":"https://access.redhat.com/errata/RHSA-2026:8857"},{"source":"nvd","sourceId":"CVE-2026-3085","modified":"2026-07-21T12:18:25.753","url":"https://access.redhat.com/errata/RHSA-2026:8857"},{"source":"redhat","sourceId":"CVE-2026-3085","modified":"2026-07-20T19:06:56+00:00","url":"https://access.redhat.com/errata/RHSA-2026:8857"}]},{"url":"https://access.redhat.com/errata/RHSA-2026:8862","tags":["vendor-advisory","x_refsource_REDHAT","vendor-remediation"],"source":"mitre","sourceId":"redhat-SADP","modified":"2026-07-21T12:05:03.584Z","origins":[{"source":"mitre","sourceId":"redhat-SADP","modified":"2026-07-21T12:05:03.584Z","url":"https://access.redhat.com/errata/RHSA-2026:8862"},{"source":"nvd","sourceId":"CVE-2026-3085","modified":"2026-07-21T12:18:25.753","url":"https://access.redhat.com/errata/RHSA-2026:8862"},{"source":"redhat","sourceId":"CVE-2026-3085","modified":"2026-07-20T19:06:56+00:00","url":"https://access.redhat.com/errata/RHSA-2026:8862"}]},{"url":"https://access.redhat.com/errata/RHSA-2026:6300","tags":["vendor-advisory","x_refsource_REDHAT","vendor-remediation"],"source":"mitre","sourceId":"redhat-SADP","modified":"2026-07-21T12:05:03.584Z","origins":[{"source":"mitre","sourceId":"redhat-SADP","modified":"2026-07-21T12:05:03.584Z","url":"https://access.redhat.com/errata/RHSA-2026:6300"},{"source":"nvd","sourceId":"CVE-2026-3085","modified":"2026-07-21T12:18:25.753","url":"https://access.redhat.com/errata/RHSA-2026:6300"},{"source":"redhat","sourceId":"CVE-2026-3085","modified":"2026-07-20T19:06:56+00:00","url":"https://access.redhat.com/errata/RHSA-2026:6300"}]},{"url":"https://access.redhat.com/errata/RHSA-2026:19180","tags":["vendor-advisory","x_refsource_REDHAT","vendor-remediation"],"source":"mitre","sourceId":"redhat-SADP","modified":"2026-07-21T12:05:03.584Z","origins":[{"source":"mitre","sourceId":"redhat-SADP","modified":"2026-07-21T12:05:03.584Z","url":"https://access.redhat.com/errata/RHSA-2026:19180"},{"source":"nvd","sourceId":"CVE-2026-3085","modified":"2026-07-21T12:18:25.753","url":"https://access.redhat.com/errata/RHSA-2026:19180"},{"source":"redhat","sourceId":"CVE-2026-3085","modified":"2026-07-20T19:06:56+00:00","url":"https://access.redhat.com/errata/RHSA-2026:19180"}]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-3085","tags":["vendor-reference"],"source":"redhat","sourceId":"CVE-2026-3085","modified":"2026-07-20T19:06:56+00:00","origins":[{"source":"redhat","sourceId":"CVE-2026-3085","modified":"2026-07-20T19:06:56+00:00","url":"https://www.cve.org/CVERecord?id=CVE-2026-3085"}]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-3085","tags":["vendor-reference"],"source":"redhat","sourceId":"CVE-2026-3085","modified":"2026-07-20T19:06:56+00:00","origins":[{"source":"redhat","sourceId":"CVE-2026-3085","modified":"2026-07-20T19:06:56+00:00","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-3085"}]},{"source":"euvd","sourceId":"EUVD-2026-12129","url":"https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-12129","tags":["ADVISORY"],"origins":[{"source":"euvd","sourceId":"EUVD-2026-12129","url":"https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-12129"}]}],"packages":[],"pocCandidates":[],"cataloguedPoc":[],"vendorStatements":[{"source":"redhat","sourceId":"CVE-2026-3085","modified":"2026-07-20T19:06:56+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-3085.json","productId":"7Server-ELS:gstreamer-plugins-base-0:0.10.36-11.el7_9.i686","product":"gstreamer-plugins-base-0:0.10.36-11.el7_9.i686 as a component of Red Hat Enterprise Linux Server (v. 7 ELS)","status":"fixed","remediations":[{"category":"vendor_fix","details":"For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258","url":"https://access.redhat.com/errata/RHSA-2026:7850"},{"category":"workaround","details":"To mitigate this issue, avoid processing X-QDM RTP payloads from untrusted sources. Restricting network access to applications that utilize GStreamer for RTP stream processing can limit exposure."}],"purl":"pkg:rpm/redhat/gstreamer-plugins-base@0.10.36-11.el7_9?arch=i686","origins":[{"source":"redhat","sourceId":"CVE-2026-3085","modified":"2026-07-20T19:06:56+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-3085.json"}]},{"source":"redhat","sourceId":"CVE-2026-3085","modified":"2026-07-20T19:06:56+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-3085.json","productId":"7Server-ELS:gstreamer1-plugins-base-debuginfo-0:1.10.4-4.el7_9.ppc64","product":"gstreamer1-plugins-base-debuginfo-0:1.10.4-4.el7_9.ppc64 as a component of Red Hat Enterprise Linux Server (v. 7 ELS)","status":"fixed","remediations":[{"category":"vendor_fix","details":"For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258","url":"https://access.redhat.com/errata/RHSA-2026:7673"},{"category":"workaround","details":"To mitigate this issue, avoid processing X-QDM RTP payloads from untrusted sources. Restricting network access to applications that utilize GStreamer for RTP stream processing can limit exposure."}],"purl":"pkg:rpm/redhat/gstreamer1-plugins-base-debuginfo@1.10.4-4.el7_9?arch=ppc64","origins":[{"source":"redhat","sourceId":"CVE-2026-3085","modified":"2026-07-20T19:06:56+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-3085.json"}]},{"source":"redhat","sourceId":"CVE-2026-3085","modified":"2026-07-20T19:06:56+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-3085.json","productId":"7Server-optional-ELS:gstreamer1-plugins-bad-free-devel-0:1.10.4-5.el7_9.i686","product":"gstreamer1-plugins-bad-free-devel-0:1.10.4-5.el7_9.i686 as a component of Red Hat Enterprise Linux Server Optional (v. 7 ELS)","status":"fixed","remediations":[{"category":"vendor_fix","details":"For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258","url":"https://access.redhat.com/errata/RHSA-2026:7673"},{"category":"workaround","details":"To mitigate this issue, avoid processing X-QDM RTP payloads from untrusted sources. Restricting network access to applications that utilize GStreamer for RTP stream processing can limit exposure."}],"purl":"pkg:rpm/redhat/gstreamer1-plugins-bad-free-devel@1.10.4-5.el7_9?arch=i686","origins":[{"source":"redhat","sourceId":"CVE-2026-3085","modified":"2026-07-20T19:06:56+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-3085.json"}]},{"source":"redhat","sourceId":"CVE-2026-3085","modified":"2026-07-20T19:06:56+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-3085.json","productId":"AppStream-10.0.Z.E2S:gstreamer1-plugins-base-debugsource-0:1.24.11-1.el10_0.1.s390x","product":"gstreamer1-plugins-base-debugsource-0:1.24.11-1.el10_0.1.s390x as a component of Red Hat Enterprise Linux AppStream EUS (v. 10.0)","status":"fixed","remediations":[{"category":"vendor_fix","details":"For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258","url":"https://access.redhat.com/errata/RHSA-2026:8854"},{"category":"workaround","details":"To mitigate this issue, avoid processing X-QDM RTP payloads from untrusted sources. Restricting network access to applications that utilize GStreamer for RTP stream processing can limit exposure."}],"purl":"pkg:rpm/redhat/gstreamer1-plugins-base-debugsource@1.24.11-1.el10_0.1?arch=s390x","origins":[{"source":"redhat","sourceId":"CVE-2026-3085","modified":"2026-07-20T19:06:56+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-3085.json"}]},{"source":"redhat","sourceId":"CVE-2026-3085","modified":"2026-07-20T19:06:56+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-3085.json","productId":"AppStream-10.1.Z:gstreamer1-plugins-bad-free-debuginfo-0:1.24.11-3.el10_1.ppc64le","product":"gstreamer1-plugins-bad-free-debuginfo-0:1.24.11-3.el10_1.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 10)","status":"fixed","remediations":[{"category":"vendor_fix","details":"For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258","url":"https://access.redhat.com/errata/RHSA-2026:6259"},{"category":"workaround","details":"To mitigate this issue, avoid processing X-QDM RTP payloads from untrusted sources. Restricting network access to applications that utilize GStreamer for RTP stream processing can limit exposure."}],"purl":"pkg:rpm/redhat/gstreamer1-plugins-bad-free-debuginfo@1.24.11-3.el10_1?arch=ppc64le","origins":[{"source":"redhat","sourceId":"CVE-2026-3085","modified":"2026-07-20T19:06:56+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-3085.json"}]},{"source":"redhat","sourceId":"CVE-2026-3085","modified":"2026-07-20T19:06:56+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-3085.json","productId":"AppStream-10.1.Z:gstreamer1-plugins-good-gtk-0:1.24.11-2.el10_1.s390x","product":"gstreamer1-plugins-good-gtk-0:1.24.11-2.el10_1.s390x as a component of Red Hat Enterprise Linux AppStream (v. 10)","status":"fixed","remediations":[{"category":"vendor_fix","details":"For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258","url":"https://access.redhat.com/errata/RHSA-2026:6259"},{"category":"workaround","details":"To mitigate this issue, avoid processing X-QDM RTP payloads from untrusted sources. Restricting network access to applications that utilize GStreamer for RTP stream processing can limit exposure."}],"purl":"pkg:rpm/redhat/gstreamer1-plugins-good-gtk@1.24.11-2.el10_1?arch=s390x","origins":[{"source":"redhat","sourceId":"CVE-2026-3085","modified":"2026-07-20T19:06:56+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-3085.json"}]},{"source":"redhat","sourceId":"CVE-2026-3085","modified":"2026-07-20T19:06:56+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-3085.json","productId":"AppStream-10.2.Z:gstreamer1-plugins-base-devel-0:1.26.7-2.el10_2.aarch64","product":"gstreamer1-plugins-base-devel-0:1.26.7-2.el10_2.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 10)","status":"fixed","remediations":[{"category":"vendor_fix","details":"For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258","url":"https://access.redhat.com/errata/RHSA-2026:19024"},{"category":"workaround","details":"To mitigate this issue, avoid processing X-QDM RTP payloads from untrusted sources. Restricting network access to applications that utilize GStreamer for RTP stream processing can limit exposure."}],"purl":"pkg:rpm/redhat/gstreamer1-plugins-base-devel@1.26.7-2.el10_2?arch=aarch64","origins":[{"source":"redhat","sourceId":"CVE-2026-3085","modified":"2026-07-20T19:06:56+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-3085.json"}]},{"source":"redhat","sourceId":"CVE-2026-3085","modified":"2026-07-20T19:06:56+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-3085.json","productId":"AppStream-8.10.0.Z.MAIN.EUS:gstreamer1-plugins-bad-free-debuginfo-0:1.16.1-6.el8_10.ppc64le","product":"gstreamer1-plugins-bad-free-debuginfo-0:1.16.1-6.el8_10.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 8)","status":"fixed","remediations":[{"category":"vendor_fix","details":"For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258","url":"https://access.redhat.com/errata/RHSA-2026:6750"},{"category":"workaround","details":"To mitigate this issue, avoid processing X-QDM RTP payloads from untrusted sources. Restricting network access to applications that utilize GStreamer for RTP stream processing can limit exposure."}],"purl":"pkg:rpm/redhat/gstreamer1-plugins-bad-free-debuginfo@1.16.1-6.el8_10?arch=ppc64le","origins":[{"source":"redhat","sourceId":"CVE-2026-3085","modified":"2026-07-20T19:06:56+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-3085.json"}]},{"source":"redhat","sourceId":"CVE-2026-3085","modified":"2026-07-20T19:06:56+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-3085.json","productId":"AppStream-8.10.0.Z.MAIN.EUS:gstreamer1-plugins-good-gtk-debuginfo-0:1.16.1-6.el8_10.aarch64","product":"gstreamer1-plugins-good-gtk-debuginfo-0:1.16.1-6.el8_10.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 8)","status":"fixed","remediations":[{"category":"vendor_fix","details":"For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258","url":"https://access.redhat.com/errata/RHSA-2026:6750"},{"category":"workaround","details":"To mitigate this issue, avoid processing X-QDM RTP payloads from untrusted sources. Restricting network access to applications that utilize GStreamer for RTP stream processing can limit exposure."}],"purl":"pkg:rpm/redhat/gstreamer1-plugins-good-gtk-debuginfo@1.16.1-6.el8_10?arch=aarch64","origins":[{"source":"redhat","sourceId":"CVE-2026-3085","modified":"2026-07-20T19:06:56+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-3085.json"}]},{"source":"redhat","sourceId":"CVE-2026-3085","modified":"2026-07-20T19:06:56+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-3085.json","productId":"AppStream-8.4.0.Z.AUS:gstreamer1-plugins-good-0:1.16.1-4.el8_4.x86_64","product":"gstreamer1-plugins-good-0:1.16.1-4.el8_4.x86_64 as a component of Red Hat Enterprise Linux AppStream AUS (v.8.4)","status":"fixed","remediations":[{"category":"vendor_fix","details":"For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258","url":"https://access.redhat.com/errata/RHSA-2026:9446"},{"category":"workaround","details":"To mitigate this issue, avoid processing X-QDM RTP payloads from untrusted sources. Restricting network access to applications that utilize GStreamer for RTP stream processing can limit exposure."}],"purl":"pkg:rpm/redhat/gstreamer1-plugins-good@1.16.1-4.el8_4?arch=x86_64","origins":[{"source":"redhat","sourceId":"CVE-2026-3085","modified":"2026-07-20T19:06:56+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-3085.json"}]},{"source":"redhat","sourceId":"CVE-2026-3085","modified":"2026-07-20T19:06:56+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-3085.json","productId":"AppStream-8.6.0.Z.AUS:gstreamer1-plugins-base-tools-debuginfo-0:1.16.1-4.el8_6.x86_64","product":"gstreamer1-plugins-base-tools-debuginfo-0:1.16.1-4.el8_6.x86_64 as a component of Red Hat Enterprise Linux AppStream AUS (v.8.6)","status":"fixed","remediations":[{"category":"vendor_fix","details":"For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258","url":"https://access.redhat.com/errata/RHSA-2026:9447"},{"category":"workaround","details":"To mitigate this issue, avoid processing X-QDM RTP payloads from untrusted sources. Restricting network access to applications that utilize GStreamer for RTP stream processing can limit exposure."}],"purl":"pkg:rpm/redhat/gstreamer1-plugins-base-tools-debuginfo@1.16.1-4.el8_6?arch=x86_64","origins":[{"source":"redhat","sourceId":"CVE-2026-3085","modified":"2026-07-20T19:06:56+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-3085.json"}]},{"source":"redhat","sourceId":"CVE-2026-3085","modified":"2026-07-20T19:06:56+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-3085.json","productId":"AppStream-8.6.0.Z.E4S:gstreamer1-plugins-good-0:1.16.1-4.el8_6.i686","product":"gstreamer1-plugins-good-0:1.16.1-4.el8_6.i686 as a component of Red Hat Enterprise Linux AppStream E4S (v.8.6)","status":"fixed","remediations":[{"category":"vendor_fix","details":"For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258","url":"https://access.redhat.com/errata/RHSA-2026:9447"},{"category":"workaround","details":"To mitigate this issue, avoid processing X-QDM RTP payloads from untrusted sources. Restricting network access to applications that utilize GStreamer for RTP stream processing can limit exposure."}],"purl":"pkg:rpm/redhat/gstreamer1-plugins-good@1.16.1-4.el8_6?arch=i686","origins":[{"source":"redhat","sourceId":"CVE-2026-3085","modified":"2026-07-20T19:06:56+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-3085.json"}]},{"source":"redhat","sourceId":"CVE-2026-3085","modified":"2026-07-20T19:06:56+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-3085.json","productId":"AppStream-8.8.0.Z.E4S:gstreamer1-plugins-bad-free-0:1.16.1-4.el8_8.ppc64le","product":"gstreamer1-plugins-bad-free-0:1.16.1-4.el8_8.ppc64le as a component of Red Hat Enterprise Linux AppStream E4S (v.8.8)","status":"fixed","remediations":[{"category":"vendor_fix","details":"For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258","url":"https://access.redhat.com/errata/RHSA-2026:9488"},{"category":"workaround","details":"To mitigate this issue, avoid processing X-QDM RTP payloads from untrusted sources. Restricting network access to applications that utilize GStreamer for RTP stream processing can limit exposure."}],"purl":"pkg:rpm/redhat/gstreamer1-plugins-bad-free@1.16.1-4.el8_8?arch=ppc64le","origins":[{"source":"redhat","sourceId":"CVE-2026-3085","modified":"2026-07-20T19:06:56+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-3085.json"}]},{"source":"redhat","sourceId":"CVE-2026-3085","modified":"2026-07-20T19:06:56+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-3085.json","productId":"AppStream-8.8.0.Z.TUS:gstreamer1-plugins-base-debugsource-0:1.16.1-4.el8_8.x86_64","product":"gstreamer1-plugins-base-debugsource-0:1.16.1-4.el8_8.x86_64 as a component of Red Hat Enterprise Linux AppStream TUS (v.8.8)","status":"fixed","remediations":[{"category":"vendor_fix","details":"For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258","url":"https://access.redhat.com/errata/RHSA-2026:9488"},{"category":"workaround","details":"To mitigate this issue, avoid processing X-QDM RTP payloads from untrusted sources. Restricting network access to applications that utilize GStreamer for RTP stream processing can limit exposure."}],"purl":"pkg:rpm/redhat/gstreamer1-plugins-base-debugsource@1.16.1-4.el8_8?arch=x86_64","origins":[{"source":"redhat","sourceId":"CVE-2026-3085","modified":"2026-07-20T19:06:56+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-3085.json"}]},{"source":"redhat","sourceId":"CVE-2026-3085","modified":"2026-07-20T19:06:56+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-3085.json","productId":"AppStream-9.0.0.Z.E4S:gstreamer1-plugins-base-tools-debuginfo-0:1.18.4-8.el9_0.ppc64le","product":"gstreamer1-plugins-base-tools-debuginfo-0:1.18.4-8.el9_0.ppc64le as a component of Red Hat Enterprise Linux AppStream E4S (v.9.0)","status":"fixed","remediations":[{"category":"vendor_fix","details":"For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258","url":"https://access.redhat.com/errata/RHSA-2026:8876"},{"category":"workaround","details":"To mitigate this issue, avoid processing X-QDM RTP payloads from untrusted sources. Restricting network access to applications that utilize GStreamer for RTP stream processing can limit exposure."}],"purl":"pkg:rpm/redhat/gstreamer1-plugins-base-tools-debuginfo@1.18.4-8.el9_0?arch=ppc64le","origins":[{"source":"redhat","sourceId":"CVE-2026-3085","modified":"2026-07-20T19:06:56+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-3085.json"}]},{"source":"redhat","sourceId":"CVE-2026-3085","modified":"2026-07-20T19:06:56+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-3085.json","productId":"AppStream-9.2.0.Z.E4S:gstreamer1-plugins-base-0:1.18.4-8.el9_2.x86_64","product":"gstreamer1-plugins-base-0:1.18.4-8.el9_2.x86_64 as a component of Red Hat Enterprise Linux AppStream E4S (v.9.2)","status":"fixed","remediations":[{"category":"vendor_fix","details":"For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258","url":"https://access.redhat.com/errata/RHSA-2026:8874"},{"category":"workaround","details":"To mitigate this issue, avoid processing X-QDM RTP payloads from untrusted sources. Restricting network access to applications that utilize GStreamer for RTP stream processing can limit exposure."}],"purl":"pkg:rpm/redhat/gstreamer1-plugins-base@1.18.4-8.el9_2?arch=x86_64","origins":[{"source":"redhat","sourceId":"CVE-2026-3085","modified":"2026-07-20T19:06:56+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-3085.json"}]},{"source":"redhat","sourceId":"CVE-2026-3085","modified":"2026-07-20T19:06:56+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-3085.json","productId":"AppStream-9.2.0.Z.E4S:gstreamer1-plugins-good-qt-debuginfo-0:1.18.4-8.el9_2.x86_64","product":"gstreamer1-plugins-good-qt-debuginfo-0:1.18.4-8.el9_2.x86_64 as a component of Red Hat Enterprise Linux AppStream E4S (v.9.2)","status":"fixed","remediations":[{"category":"vendor_fix","details":"For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258","url":"https://access.redhat.com/errata/RHSA-2026:8874"},{"category":"workaround","details":"To mitigate this issue, avoid processing X-QDM RTP payloads from untrusted sources. Restricting network access to applications that utilize GStreamer for RTP stream processing can limit exposure."}],"purl":"pkg:rpm/redhat/gstreamer1-plugins-good-qt-debuginfo@1.18.4-8.el9_2?arch=x86_64","origins":[{"source":"redhat","sourceId":"CVE-2026-3085","modified":"2026-07-20T19:06:56+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-3085.json"}]},{"source":"redhat","sourceId":"CVE-2026-3085","modified":"2026-07-20T19:06:56+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-3085.json","productId":"AppStream-9.4.0.Z.EUS:gstreamer1-plugins-good-debuginfo-0:1.22.1-4.el9_4.i686","product":"gstreamer1-plugins-good-debuginfo-0:1.22.1-4.el9_4.i686 as a component of Red Hat Enterprise Linux AppStream EUS (v.9.4)","status":"fixed","remediations":[{"category":"vendor_fix","details":"For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258","url":"https://access.redhat.com/errata/RHSA-2026:8857"},{"category":"workaround","details":"To mitigate this issue, avoid processing X-QDM RTP payloads from untrusted sources. Restricting network access to applications that utilize GStreamer for RTP stream processing can limit exposure."}],"purl":"pkg:rpm/redhat/gstreamer1-plugins-good-debuginfo@1.22.1-4.el9_4?arch=i686","origins":[{"source":"redhat","sourceId":"CVE-2026-3085","modified":"2026-07-20T19:06:56+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-3085.json"}]},{"source":"redhat","sourceId":"CVE-2026-3085","modified":"2026-07-20T19:06:56+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-3085.json","productId":"AppStream-9.6.0.Z.EUS:gstreamer1-plugins-base-0:1.22.12-5.el9_6.x86_64","product":"gstreamer1-plugins-base-0:1.22.12-5.el9_6.x86_64 as a component of Red Hat Enterprise Linux AppStream EUS (v.9.6)","status":"fixed","remediations":[{"category":"vendor_fix","details":"For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258","url":"https://access.redhat.com/errata/RHSA-2026:8862"},{"category":"workaround","details":"To mitigate this issue, avoid processing X-QDM RTP payloads from untrusted sources. Restricting network access to applications that utilize GStreamer for RTP stream processing can limit exposure."}],"purl":"pkg:rpm/redhat/gstreamer1-plugins-base@1.22.12-5.el9_6?arch=x86_64","origins":[{"source":"redhat","sourceId":"CVE-2026-3085","modified":"2026-07-20T19:06:56+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-3085.json"}]},{"source":"redhat","sourceId":"CVE-2026-3085","modified":"2026-07-20T19:06:56+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-3085.json","productId":"AppStream-9.6.0.Z.EUS:gstreamer1-plugins-good-qt-debuginfo-0:1.22.12-5.el9_6.x86_64","product":"gstreamer1-plugins-good-qt-debuginfo-0:1.22.12-5.el9_6.x86_64 as a component of Red Hat Enterprise Linux AppStream EUS (v.9.6)","status":"fixed","remediations":[{"category":"vendor_fix","details":"For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258","url":"https://access.redhat.com/errata/RHSA-2026:8862"},{"category":"workaround","details":"To mitigate this issue, avoid processing X-QDM RTP payloads from untrusted sources. Restricting network access to applications that utilize GStreamer for RTP stream processing can limit exposure."}],"purl":"pkg:rpm/redhat/gstreamer1-plugins-good-qt-debuginfo@1.22.12-5.el9_6?arch=x86_64","origins":[{"source":"redhat","sourceId":"CVE-2026-3085","modified":"2026-07-20T19:06:56+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-3085.json"}]},{"source":"redhat","sourceId":"CVE-2026-3085","modified":"2026-07-20T19:06:56+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-3085.json","productId":"AppStream-9.7.0.Z.MAIN:gstreamer1-plugins-base-debugsource-0:1.22.12-5.el9_7.s390x","product":"gstreamer1-plugins-base-debugsource-0:1.22.12-5.el9_7.s390x as a component of Red Hat Enterprise Linux AppStream (v. 9)","status":"fixed","remediations":[{"category":"vendor_fix","details":"For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258","url":"https://access.redhat.com/errata/RHSA-2026:6300"},{"category":"workaround","details":"To mitigate this issue, avoid processing X-QDM RTP payloads from untrusted sources. Restricting network access to applications that utilize GStreamer for RTP stream processing can limit exposure."}],"purl":"pkg:rpm/redhat/gstreamer1-plugins-base-debugsource@1.22.12-5.el9_7?arch=s390x","origins":[{"source":"redhat","sourceId":"CVE-2026-3085","modified":"2026-07-20T19:06:56+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-3085.json"}]},{"source":"redhat","sourceId":"CVE-2026-3085","modified":"2026-07-20T19:06:56+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-3085.json","productId":"AppStream-9.7.0.Z.MAIN:gstreamer1-plugins-ugly-free-debuginfo-0:1.22.12-4.el9_7.x86_64","product":"gstreamer1-plugins-ugly-free-debuginfo-0:1.22.12-4.el9_7.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 9)","status":"fixed","remediations":[{"category":"vendor_fix","details":"For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258","url":"https://access.redhat.com/errata/RHSA-2026:6300"},{"category":"workaround","details":"To mitigate this issue, avoid processing X-QDM RTP payloads from untrusted sources. Restricting network access to applications that utilize GStreamer for RTP stream processing can limit exposure."}],"purl":"pkg:rpm/redhat/gstreamer1-plugins-ugly-free-debuginfo@1.22.12-4.el9_7?arch=x86_64","origins":[{"source":"redhat","sourceId":"CVE-2026-3085","modified":"2026-07-20T19:06:56+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-3085.json"}]},{"source":"redhat","sourceId":"CVE-2026-3085","modified":"2026-07-20T19:06:56+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-3085.json","productId":"AppStream-9.8.0.Z.MAIN.EUS:gstreamer1-plugins-good-0:1.22.12-7.el9_8.x86_64","product":"gstreamer1-plugins-good-0:1.22.12-7.el9_8.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 9)","status":"fixed","remediations":[{"category":"vendor_fix","details":"For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258","url":"https://access.redhat.com/errata/RHSA-2026:19180"},{"category":"workaround","details":"To mitigate this issue, avoid processing X-QDM RTP payloads from untrusted sources. Restricting network access to applications that utilize GStreamer for RTP stream processing can limit exposure."}],"purl":"pkg:rpm/redhat/gstreamer1-plugins-good@1.22.12-7.el9_8?arch=x86_64","origins":[{"source":"redhat","sourceId":"CVE-2026-3085","modified":"2026-07-20T19:06:56+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-3085.json"}]},{"source":"redhat","sourceId":"CVE-2026-3085","modified":"2026-07-20T19:06:56+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-3085.json","productId":"CRB-10.1.Z:gstreamer1-plugins-bad-free-devel-0:1.24.11-3.el10_1.aarch64","product":"gstreamer1-plugins-bad-free-devel-0:1.24.11-3.el10_1.aarch64 as a component of Red Hat Enterprise Linux CodeReady Linux Builder (v. 10)","status":"fixed","remediations":[{"category":"vendor_fix","details":"For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258","url":"https://access.redhat.com/errata/RHSA-2026:6259"},{"category":"workaround","details":"To mitigate this issue, avoid processing X-QDM RTP payloads from untrusted sources. Restricting network access to applications that utilize GStreamer for RTP stream processing can limit exposure."}],"purl":"pkg:rpm/redhat/gstreamer1-plugins-bad-free-devel@1.24.11-3.el10_1?arch=aarch64","origins":[{"source":"redhat","sourceId":"CVE-2026-3085","modified":"2026-07-20T19:06:56+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-3085.json"}]},{"source":"redhat","sourceId":"CVE-2026-3085","modified":"2026-07-20T19:06:56+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-3085.json","productId":"CRB-9.6.0.Z.EUS:gstreamer1-plugins-bad-free-debuginfo-0:1.22.12-5.el9_6.aarch64","product":"gstreamer1-plugins-bad-free-debuginfo-0:1.22.12-5.el9_6.aarch64 as a component of Red Hat CodeReady Linux Builder EUS (v.9.6)","status":"fixed","remediations":[{"category":"vendor_fix","details":"For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258","url":"https://access.redhat.com/errata/RHSA-2026:8862"},{"category":"workaround","details":"To mitigate this issue, avoid processing X-QDM RTP payloads from untrusted sources. Restricting network access to applications that utilize GStreamer for RTP stream processing can limit exposure."}],"purl":"pkg:rpm/redhat/gstreamer1-plugins-bad-free-debuginfo@1.22.12-5.el9_6?arch=aarch64","origins":[{"source":"redhat","sourceId":"CVE-2026-3085","modified":"2026-07-20T19:06:56+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-3085.json"}]},{"source":"redhat","sourceId":"CVE-2026-3085","modified":"2026-07-20T19:06:56+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-3085.json","productId":"CRB-9.8.0.Z.MAIN.EUS:gstreamer1-plugins-bad-free-libs-debuginfo-0:1.22.12-7.el9_8.x86_64","product":"gstreamer1-plugins-bad-free-libs-debuginfo-0:1.22.12-7.el9_8.x86_64 as a component of Red Hat Enterprise Linux CodeReady Linux Builder (v. 9)","status":"fixed","remediations":[{"category":"vendor_fix","details":"For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258","url":"https://access.redhat.com/errata/RHSA-2026:19180"},{"category":"workaround","details":"To mitigate this issue, avoid processing X-QDM RTP payloads from untrusted sources. Restricting network access to applications that utilize GStreamer for RTP stream processing can limit exposure."}],"purl":"pkg:rpm/redhat/gstreamer1-plugins-bad-free-libs-debuginfo@1.22.12-7.el9_8?arch=x86_64","origins":[{"source":"redhat","sourceId":"CVE-2026-3085","modified":"2026-07-20T19:06:56+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-3085.json"}]},{"source":"redhat","sourceId":"CVE-2026-3085","modified":"2026-07-20T19:06:56+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-3085.json","productId":"red_hat_enterprise_linux_6:gstreamer-plugins-good","product":"gstreamer-plugins-good as a component of Red Hat Enterprise Linux 6","status":"known_affected","remediations":[{"category":"workaround","details":"To mitigate this issue, avoid processing X-QDM RTP payloads from untrusted sources. Restricting network access to applications that utilize GStreamer for RTP stream processing can limit exposure."},{"category":"no_fix_planned","details":"Out of support scope"}],"purl":"pkg:rpm/redhat/gstreamer-plugins-good","origins":[{"source":"redhat","sourceId":"CVE-2026-3085","modified":"2026-07-20T19:06:56+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-3085.json"}]},{"source":"redhat","sourceId":"CVE-2026-3085","modified":"2026-07-20T19:06:56+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-3085.json","productId":"red_hat_enterprise_linux_6:gstreamer-plugins-good-devel","product":"gstreamer-plugins-good-devel as a component of Red Hat Enterprise Linux 6","status":"known_affected","remediations":[{"category":"workaround","details":"To mitigate this issue, avoid processing X-QDM RTP payloads from untrusted sources. Restricting network access to applications that utilize GStreamer for RTP stream processing can limit exposure."},{"category":"no_fix_planned","details":"Out of support scope"}],"purl":"pkg:rpm/redhat/gstreamer-plugins-good-devel","origins":[{"source":"redhat","sourceId":"CVE-2026-3085","modified":"2026-07-20T19:06:56+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-3085.json"}]},{"source":"redhat","sourceId":"CVE-2026-3085","modified":"2026-07-20T19:06:56+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-3085.json","productId":"red_hat_enterprise_linux_6:gstreamer-plugins-good.src","product":"gstreamer-plugins-good.src as a component of Red Hat Enterprise Linux 6","status":"known_affected","remediations":[{"category":"workaround","details":"To mitigate this issue, avoid processing X-QDM RTP payloads from untrusted sources. Restricting network access to applications that utilize GStreamer for RTP stream processing can limit exposure."},{"category":"no_fix_planned","details":"Out of support scope"}],"purl":"pkg:rpm/redhat/gstreamer-plugins-good?arch=src","origins":[{"source":"redhat","sourceId":"CVE-2026-3085","modified":"2026-07-20T19:06:56+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-3085.json"}]},{"source":"redhat","sourceId":"CVE-2026-3085","modified":"2026-07-20T19:06:56+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-3085.json","productId":"red_hat_enterprise_linux_8:mingw-gstreamer1-plugins-good.src","product":"mingw-gstreamer1-plugins-good.src as a component of Red Hat Enterprise Linux 8","status":"known_not_affected","remediations":[],"justification":"vulnerable_code_not_present","purl":"pkg:rpm/redhat/mingw-gstreamer1-plugins-good?arch=src","origins":[{"source":"redhat","sourceId":"CVE-2026-3085","modified":"2026-07-20T19:06:56+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-3085.json"}]},{"source":"redhat","sourceId":"CVE-2026-3085","modified":"2026-07-20T19:06:56+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-3085.json","productId":"red_hat_enterprise_linux_8:mingw32-gstreamer1-plugins-good","product":"mingw32-gstreamer1-plugins-good as a component of Red Hat Enterprise Linux 8","status":"known_not_affected","remediations":[],"justification":"vulnerable_code_not_present","purl":"pkg:rpm/redhat/mingw32-gstreamer1-plugins-good","origins":[{"source":"redhat","sourceId":"CVE-2026-3085","modified":"2026-07-20T19:06:56+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-3085.json"}]},{"source":"redhat","sourceId":"CVE-2026-3085","modified":"2026-07-20T19:06:56+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-3085.json","productId":"red_hat_enterprise_linux_8:mingw64-gstreamer1-plugins-good","product":"mingw64-gstreamer1-plugins-good as a component of Red Hat Enterprise Linux 8","status":"known_not_affected","remediations":[],"justification":"vulnerable_code_not_present","purl":"pkg:rpm/redhat/mingw64-gstreamer1-plugins-good","origins":[{"source":"redhat","sourceId":"CVE-2026-3085","modified":"2026-07-20T19:06:56+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-3085.json"}]}],"vendorCoverage":{"total":1375,"shown":32,"omitted":1343,"source":"redhat"}}