Out-of-Bounds Read and Write Vulnerability in GStreamer MXF Plugin
CVE-2026-125703

5.5MEDIUM

Key Information:

Vendor: Red Hat
Status: Red Hat Enterprise Linux 10; Red Hat Enterprise Linux 6; Red Hat Enterprise Linux 7; Red Hat Enterprise Linux 8
Vendor: CVE Published:; 10 November 2026

What is CVE-2026-125703?

A vulnerability exists in the GStreamer gst-plugins-bad MXF plugin due to insufficient bounds checks in the parsing of crafted VANC data. This flaw can lead to out-of-bounds read errors in the demuxer, and improper buffer size calculations during the muxing of multiple ancillary packets can result in out-of-bounds writes. Exploitation of this vulnerability may cause crashes in the application, leading to potential denial of service, thereby compromising the stability of systems using affected versions.