Log in Start free

Vulnerability · Published Jun 11, 2026 · Assigned by redhat

CVE-2026-53702Gstreamer1-plugins-bad-free: gstreamer: stack buffer overflow in h.265 buffering period sei parser

Medium 6.5

In plain English

A medium-severity out-of-bounds write in Red Hat Enterprise Linux 10 from Red Hat. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.2% (higher than 14% of all known vulnerabilities). Fixed versions are available - upgrade the affected package.

Severity (CVSS 3.1)6.5Medium
Exploit odds (30 days)0.2%top 86.4% of all CVEs
Exploited in the wildNo reportsCISA SSVC: none
Attack toolingNoneno public tooling known

Official description

A stack buffer overflow flaw was found in the GStreamer H.265 codec parser library (gst-plugins-bad). When parsing a buffering period SEI message, the parser uses an incorrect loop bound derived from cpb_cnt_minus1[i] (the loop index) instead of the sub-layer 0 CPB count cpb_cnt_minus1[0] from the referenced Sequence Parameter Set. A crafted H.265 video file or stream can cause the parser to write beyond the bounds of stack-allocated CPB delay arrays, resulting in a crash or potential stack memory corruption.

Affected packages & fixed versions

EcosystemPackageFixed inAdvisory
Debian:12gst-plugins-bad1.01.22.0-4+deb12u8DEBIAN-CVE-2026-53702
Debian:13gst-plugins-bad1.0no fix listedDEBIAN-CVE-2026-53702
Debian:14gst-plugins-bad1.01.28.3-1DEBIAN-CVE-2026-53702
Ubuntu:25.10gst-plugins-bad1.0no fix listedUBUNTU-CVE-2026-53702
Ubuntu:26.04:LTSgst-plugins-bad1.01.28.2-1ubuntu1.1UBUNTU-CVE-2026-53702
Ubuntu:26.04:LTSgst-plugins-bad1.01.28.2-1ubuntu1.1USN-8446-1

Affected products (as reported)

VendorProductVersions
Red Hat Red Hat Enterprise Linux 10 see references
Red Hat Red Hat Enterprise Linux 7 see references
Red Hat Red Hat Enterprise Linux 8 see references
Red Hat Red Hat Enterprise Linux 9 see references

Weakness: CWE-787 · Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

References