← CVE Intelligence

CVE-2026-52719

Gstreamer1-plugins-bad-free: gstreamer: out-of-bounds read via jpeg segment length validation in va decoder PUBLISHED

Description (CNA)

An out-of-bounds read vulnerability was found in the VA JPEG decoder in GStreamer's gst-plugins-bad. The JPEG parser reads a segment length value from the bitstream without validating it against available data. A remote attacker could trick a user into opening a specially crafted JPEG file, causing downstream parsing to read beyond the provided input buffer, leading to a crash or potential information disclosure.

Affected (CNA)

Vendor / productVersions
Red Hat / Red Hat Enterprise Linux 10unaffected 0:1.26.7-2.el10_2.4 before *
Red Hat / Red Hat Enterprise Linux 10.0 Extended Update Supportunaffected 0:1.24.11-3.el10_0.4 before *
Red Hat / Red Hat Enterprise Linux 9unaffected 0:1.22.12-7.el9_8.1 before *
Red Hat / Red Hat Enterprise Linux 9.4 Update Services for SAP Solutionsunaffected 0:1.22.1-6.el9_4.4 before *
Red Hat / Red Hat Enterprise Linux 9.6 Extended Update Supportunaffected 0:1.22.12-5.el9_6.4 before *
Red Hat / Red Hat Enterprise Linux 6unknown
Red Hat / Red Hat Enterprise Linux 7unaffected
Red Hat / Red Hat Enterprise Linux 7unaffected
Red Hat / Red Hat Enterprise Linux 8unaffected

CWE

CWE-125

References

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.

redhat-SADP

An out-of-bounds read vulnerability was found in the VA JPEG decoder in GStreamer's gst-plugins-bad. The JPEG parser reads a segment length value from the bitstream without validating it against available data. A remote attacker could trick a user into opening a specially crafted JPEG file, causing downstream parsing to read beyond the provided input buffer, leading to a crash or potential information disclosure.