CVE-2026-125706

A flaw exists in GStreamer's gst-plugins-bad component, specifically within the MPEG Program Stream demuxer and the resindvd DVD-playback plugin . The root cause is missing bounds checks in the PES header parsers when reading timestamps and optional header fields. Opening a specially crafted MPEG...