CLEANSTART-2025-PJ76014 GStreamer MXF File Parsing Integer Overflow Remote Code Execution Vulnerability

Security vulnerability affects the gst-plugins-bad package. GStreamer MXF File Parsing Integer Overflow Remote Code Execution Vulnerability...

CLEANSTART-2025-CP60055 GStreamer H265 Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability

Security vulnerability affects the gst-plugins-bad package. GStreamer H265 Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability...

CLEANSTART-2025-UJ27530 GStreamer AV1 Codec Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability

Security vulnerability affects the gst-plugins-bad package. GStreamer AV1 Codec Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability...

CVE-2026-119728

A flaw was found in the H.264 video parser in gst-plugins-bad. When processing a specially crafted H.264 video file with malformed Multiview MVC Sequence Parameter Set data, the parser can dereference a NULL pointer during the cleanup of partially allocated internal structures after a parse...

CVE-2026-119727

A flaw was found in GStreamer's gst-plugins-bad H.265 video parser. When parsing a specially crafted H.265 bitstream containing a Screen Content Coding SCC extension with certain palette predictor initializer settings, an integer underflow in the upper-bound computation allows the parser to accep...

CVE-2026-119777

A flaw was found in GStreamer's gst-plugins-bad H.266/VVC parser. When processing a malformed H.266 media file or stream, an integer overflow while parsing profile, tier, and level fields can lead to a stack-based buffer overflow. An attacker could cause an application to crash and may be able to...

CVE-2026-119728

A flaw was found in the H.264 video parser in gst-plugins-bad. When processing a specially crafted H.264 video file with malformed Multiview MVC Sequence Parameter Set data, the parser can dereference a NULL pointer during the cleanup of partially allocated internal structures after a parse...

CVE-2026-119727

A flaw was found in GStreamer's gst-plugins-bad H.265 video parser. When parsing a specially crafted H.265 bitstream containing a Screen Content Coding SCC extension with certain palette predictor initializer settings, an integer underflow in the upper-bound computation allows the parser to accep...

EUVD-2026-114325

A flaw was found in GStreamer's gst-plugins-bad H.265 video parser. When parsing a specially crafted H.265 bitstream containing a Screen Content Coding SCC extension with certain palette predictor initializer settings, an integer underflow in the upper-bound computation allows the parser to accep...

CVE-2026-119727 Gst-plugins-bad: gst-plugins-bad: h.265 sps scc palette predictor array overflow via integer underflow in bounds computation

A flaw was found in GStreamer's gst-plugins-bad H.265 video parser. When parsing a specially crafted H.265 bitstream containing a Screen Content Coding SCC extension with certain palette predictor initializer settings, an integer underflow in the upper-bound computation allows the parser to accep...

CVE-2026-119727

A flaw exists in the GStreamer gst-plugins-bad H.265 video parser . When processing a specially crafted H.265 bitstream with a Screen Content Coding (SCC) extension and specific palette predictor initializer settings, an integer underflow occurs during upper-bound computation. This allows the par...

CVE-2026-119729 Gst-plugins-base: gst-plugins-bad: gst-plugins-base/gst-plugins-bad: integer overflow in av1 leb128 parser allows denial of service

A flaw was found in GStreamer. An integer overflow vulnerability in the AV1 LEB128 variable-length integer parser allows a remote attacker to cause a crash in applications that process AV1 media content. By crafting a malformed AV1 bitstream containing an invalid LEB128-encoded value, an attacker...

CVE-2026-119729

A vulnerability exists in GStreamer (specifically within gst-plugins-base/gst-plugins-bad ) due to an integer overflow in the AV1 LEB128 variable-length integer parser. A remote attacker can trigger this flaw by providing a malformed AV1 bitstream containing an invalid LEB128-encoded value. This ...

CVE-2026-119728 Gst-plugins-bad: gst-plugins-bad: null pointer dereference in h.264 mvc sps cleanup during parse failure

A flaw was found in the H.264 video parser in gst-plugins-bad. When processing a specially crafted H.264 video file with malformed Multiview MVC Sequence Parameter Set data, the parser can dereference a NULL pointer during the cleanup of partially allocated internal structures after a parse...

EUVD-2026-114318

A flaw was found in the H.264 video parser in gst-plugins-bad. When processing a specially crafted H.264 video file with malformed Multiview MVC Sequence Parameter Set data, the parser can dereference a NULL pointer during the cleanup of partially allocated internal structures after a parse...

CVE-2026-119728

A NULL pointer dereference vulnerability exists in the H.264 video parser within gst-plugins-bad . When processing a specially crafted H.264 video file containing malformed Multiview (MVC) Sequence Parameter Set data, the parser fails to correctly handle the cleanup of partially allocated interna...

CVE-2026-119777

A flaw was found in GStreamer's gst-plugins-bad H.266/VVC parser. When processing a malformed H.266 media file or stream, an integer overflow while parsing profile, tier, and level fields can lead to a stack-based buffer overflow. An attacker could cause an application to crash and may be able to...

EUVD-2026-114266

A flaw was found in GStreamer's gst-plugins-bad H.266/VVC parser. When processing a malformed H.266 media file or stream, an integer overflow while parsing profile, tier, and level fields can lead to a stack-based buffer overflow. An attacker could cause an application to crash and may be able to...

CVE-2026-119777 Gstreamer1-plugins-bad-free: gstreamer1-plugins-bad-free: stack buffer overflow in h.266/vvc parser

A flaw was found in GStreamer's gst-plugins-bad H.266/VVC parser. When processing a malformed H.266 media file or stream, an integer overflow while parsing profile, tier, and level fields can lead to a stack-based buffer overflow. An attacker could cause an application to crash and may be able to...

CVE-2026-119777

A flaw exists in GStreamer's gst-plugins-bad H.266/VVC parser. When processing a malformed H.266 media file or stream, an integer overflow occurs while parsing the profile, tier, and level fields, which can lead to a stack-based buffer overflow . This vulnerability could allow an attacker to caus...