Memory Corruption Vulnerability in GStreamer’s MXF Demuxer
CVE-2026-125707

6.1MEDIUM

Key Information:

Vendor: Red Hat
Status: Red Hat Enterprise Linux 10; Red Hat Enterprise Linux 6; Red Hat Enterprise Linux 7; Red Hat Enterprise Linux 8
Vendor: CVE Published:; 10 November 2026

What is CVE-2026-125707?

A flaw exists within the MXF demuxer of GStreamer that can result in memory corruption. Specifically, when processing a specially crafted MXF file, an off-by-one bounds check can lead to a write operation occurring past the intended limits of a temporal offset array. This flaw may result in corrupted memory and can cause the application to crash. The full impact of this vulnerability on runtime behavior has not been verified through testing.