Gst-plugins-bad: gst-plugins-bad: bounds check errors in mxf vanc packet handling
Historical advisory recorded 11 Nov 2026 00:21:23 UTC. Read the latest advisory.
cve-program · CVE-2026-125703
PublishedA flaw was found in the GStreamer gst-plugins-bad MXF plugin. Insufficient bounds checks when parsing crafted VANC data can cause an out-of-bounds read in the demuxer, while an incorrect buffer size calculation when muxing multiple ancillary packets can cause an out-of-bounds write. Processing affected content may crash the application, resulting in a denial of service.
Read the publisher's advisoryAffected versions, risk and source history
cve-program · CVE-2026-125703
PublishedGst-plugins-bad: gst-plugins-bad: bounds check errors in mxf vanc packet handling
A flaw was found in the GStreamer gst-plugins-bad MXF plugin. Insufficient bounds checks when parsing crafted VANC data can cause an out-of-bounds read in the demuxer, while an incorrect buffer size calculation when muxing multiple ancillary packets can cause an out-of-bounds write. Processing affected content may crash the application, resulting in a denial of service.
- Source published
- 10 Nov 2026 10:43:44 UTC
- Source modified
- 10 Nov 2026 22:18:54 UTC
- Saved here
- 11 Nov 2026 00:21:23 UTC
- Source terms
- CVE Program Terms of Use
Original source record · Cite this exact observation · Complete original publisher JSON
Source: cve-program · CVE Program Terms of Use. The publisher's wording is preserved. ChangeIntel groups the information and labels changes. The JSON record includes additional source fields.
CVSS 3.1 · 5.5 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H