Out-of-Bounds Read Vulnerability in GStreamer Plugin by Red Hat
CVE-2026-12891
4.3MEDIUM
What is CVE-2026-12891?
A security flaw exists in the GStreamer gst-plugins-bad package that arises when handling a malformed H.266/VVC video stream designed with a crafted aspect ratio indicator. This flaw permits the H.266 parser to execute an out-of-bounds read of nearby memory, resulting in the potential leakage of limited memory contents through video metadata. Consequently, an attacker can create a malicious H.266 video file or stream that exposes sensitive information from the application's address space when processed by any GStreamer-based application.
References
CVSS V3.1
Score:
4.3
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
None
Availability:
Low
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Unchanged
Timeline
Vulnerability published
Vulnerability Reserved
Credit
Red Hat would like to thank Dr. Faruk Kazi (CoE-CNDS Lab, VJTI, Mumbai, India) and Ramesh Adhikari (CoE-CNDS Lab, VJTI, Mumbai, India) for reporting this issue.