Debian released updates to gst-plugins-base1.0 to fix an integer overflow in GStreamer's RIFF parser. A malformed media file may trigger denial of service or potentially enable arbitrary code execution when opened.
Part of the PlainSec briefing for 2026-03-24