Integer Overflow in GStreamer JPEG 2000 Decimator
CVE-2026-121259

6.5MEDIUM

Key Information:

Vendor: Red Hat
Status: Red Hat Enterprise Linux 10; Red Hat Enterprise Linux 7; Red Hat Enterprise Linux 8; Red Hat Enterprise Linux 9
Vendor: CVE Published:; 3 November 2026

What is CVE-2026-121259?

A vulnerability has been identified in the GStreamer JPEG 2000 decimator within the gst-plugins-bad package. This issue can be exploited by specially crafted JPEG 2000 media files, which may trigger integer overflows or cause division by zero during the processing of tiles. As a result, applications handling such media could crash, leading to a denial of service, affecting availability for users and systems relying on GStreamer for media processing.