Log in Start free

Vulnerability · Published Jun 15, 2026 · Assigned by redhat

CVE-2026-52718Gstreamer1-plugins-bad-free: gstreamer: denial of service via av1 tile_list_obu parser byte/bit confusion

Medium 6.5

In plain English

A medium-severity security flaw in Red Hat Enterprise Linux 10 from Red Hat. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.4% (higher than 33% of all known vulnerabilities). Fixed versions are available - upgrade the affected package.

Severity (CVSS 3.1)6.5Medium
Exploit odds (30 days)0.4%top 67.1% of all CVEs
Exploited in the wildNo reportsCISA SSVC: none
Attack toolingNoneno public tooling known

Official description

A denial of service vulnerability was found in GStreamer's AV1 codec parser in gst-plugins-bad. The gst_av1_parser_parse_tile_list_obu() function passes a byte count to a bit-reader API that expects a bit count, causing parser desynchronization. A remote attacker could trick a user into opening a specially crafted AV1 media file, triggering an assertion abort and causing the application to crash.

Affected packages & fixed versions

EcosystemPackageFixed inAdvisory
AlmaLinux:10gstreamer1-plugins-bad-free1.26.7-2.el10_2.4ALSA-2026:36749
AlmaLinux:9gstreamer1-plugins-bad-free1.22.12-7.el9_8.1ALSA-2026:36834
AlmaLinux:10gstreamer1-plugins-bad-free-devel1.26.7-2.el10_2.4ALSA-2026:36749
AlmaLinux:9gstreamer1-plugins-bad-free-devel1.22.12-7.el9_8.1ALSA-2026:36834
AlmaLinux:10gstreamer1-plugins-bad-free-libs1.26.7-2.el10_2.4ALSA-2026:36749
AlmaLinux:9gstreamer1-plugins-bad-free-libs1.22.12-7.el9_8.1ALSA-2026:36834
Debian:12gst-plugins-bad1.01.22.0-4+deb12u8DEBIAN-CVE-2026-52718
Debian:13gst-plugins-bad1.01.26.2-3+deb13u2DEBIAN-CVE-2026-52718
Debian:14gst-plugins-bad1.01.28.4-1DEBIAN-CVE-2026-52718
Rocky Linux:10gstreamer1-plugins-bad-free0:1.26.7-2.el10_2.4RLSA-2026:36749
Rocky Linux:9gstreamer1-plugins-bad-free0:1.22.12-7.el9_8.1RLSA-2026:36834
Ubuntu:25.10gst-plugins-bad1.0no fix listedUBUNTU-CVE-2026-52718
Ubuntu:26.04:LTSgst-plugins-bad1.0no fix listedUBUNTU-CVE-2026-52718
Ubuntu:26.10gst-plugins-bad1.0no fix listedUBUNTU-CVE-2026-52718

Affected products (as reported)

VendorProductVersions
Red Hat Red Hat Enterprise Linux 10 see references
Red Hat Red Hat Enterprise Linux 10.0 Extended Update Support see references
Red Hat Red Hat Enterprise Linux 9 see references
Red Hat Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions see references
Red Hat Red Hat Enterprise Linux 9.4 Update Services for SAP Solutions see references
Red Hat Red Hat Enterprise Linux 9.6 Extended Update Support see references
Red Hat Red Hat Enterprise Linux 6 see references
Red Hat Red Hat Enterprise Linux 7 see references
Red Hat Red Hat Enterprise Linux 7 see references
Red Hat Red Hat Enterprise Linux 8 see references

Weakness: CWE-617 · Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

References