Integer Underflow Vulnerability in GStreamer H.265 Video Parser by GStreamer

CVE-2026-119727

What is CVE-2026-119727?

A vulnerability in the GStreamer library's H.265 video parser allows for an integer underflow in the computation of upper bounds when parsing a specially crafted H.265 bitstream. This specific flaw is triggered by a Screen Content Coding (SCC) extension that contains certain palette predictor initializer settings. As a result, an out-of-range value for the number of palette predictor entries can be accepted, leading to a write operation that exceeds the boundaries of a fixed-size array. The consequence is memory corruption, which may cause the application to crash. Exploiting this vulnerability necessitates the use of a malformed H.265 media file.

References