Buffer Overflow Vulnerability in GStreamer H.266/VVC Parser by Red Hat
CVE-2026-119777

7.8HIGH

Key Information:

Vendor: Red Hat
Status: Red Hat Enterprise Linux 10; Red Hat Enterprise Linux 7; Red Hat Enterprise Linux 8; Red Hat Enterprise Linux 9
Vendor: CVE Published:; 30 October 2026

What is CVE-2026-119777?

A vulnerability exists in GStreamer's gst-plugins-bad H.266/VVC parser, where processing a malformed H.266 media file or stream can trigger an integer overflow. This flaw occurs specifically when parsing profile, tier, and level fields, leading to a stack-based buffer overflow. An attacker exploiting this vulnerability could potentially crash the application and execute arbitrary code within the context of the affected application, posing significant risks to system integrity.