CVE-2026-18297

GStreamer’s OGG file parser has a stack‑based buffer overflow that permits an attacker to execute arbitrary code in the context of the affected process. The flaw arises because the length of user‑supplied data is not properly validated before copying it to a stack buffer. An attacker can trigger the vulnerability by causing a user to open a crafted OGG file or visit a malicious page that loads such a file, leading to remote code execution.

The vulnerability affects installations of the GStreamer multimedia framework. No specific product versions are listed in the advisory, so all GStreamer deployments that have not applied the latest patch are potentially susceptible. Users should verify whether their current GStreamer version includes the fix by consulting the official GStreamer security announcements.

The CVSS score of 7.8 indicates high severity. Exploitation requires user interaction and relies on the presence of vulnerable code in the OGG parser; however, once the VU is triggered, an attacker gains control of the running process. The EPSS score of 0.00301 (≈0.3%) indicates a very low probability of exploitation, and the vulnerability is not listed in the CISA KEV catalog, but the combination of stack overflow and remote code execution warrants immediate attention.