Vulnerability in H.264 Video Parser of GStreamer by Red Hat
CVE-2026-119728

5.5MEDIUM

Key Information:

Vendor: Red Hat
Status: Red Hat Enterprise Linux 10; Red Hat Enterprise Linux 6; Red Hat Enterprise Linux 7; Red Hat Enterprise Linux 8
Vendor: CVE Published:; 30 October 2026

What is CVE-2026-119728?

A vulnerability exists in the H.264 video parser of GStreamer, specifically within the gst-plugins-bad component. When processing H.264 video files that contain malformed Multiview (MVC) Sequence Parameter Set data, the parser may attempt to dereference a NULL pointer in the cleanup phase if a parse failure occurs. This flaw can lead to application crashes, causing denial of service for users relying on GStreamer for video processing tasks. Developers and system administrators are advised to evaluate their GStreamer installations and apply necessary updates to mitigate this risk.