Summary
It was discovered that GStreamer Bad Plugins incorrectly handled parsing
H.266/VVC picture partition data. An attacker could use this issue to cause
GStreamer Bad Plugins to crash, resulting in a denial of service, or
possibly execute arbitrary code. (CVE-2026-53701)
It was discovered that GStreamer Bad Plugins incorrectly handled parsing
H.265 buffering period metadata. An attacker could use this issue to cause
GStreamer Bad Plugins to crash, resulting in a denial of service, or
possibly execute arbitrary code. (CVE-2026-53702)
Fixed packages 1
| Release | Package | Fixed in |
|---|---|---|
| Ubuntu · 26.04 LTS 26.04:LTS | gst-plugins-bad1.0 | 1.28.2-1ubuntu1.1 |
Vulnerabilities 2
-
Medium 6.5
Gstreamer1-plugins-bad-free: gstreamer: out-of-bounds write in h.266/vvc pps picture partition parser
An out-of-bounds write vulnerability was found in GStreamer's H.266/VVC PPS picture partition parser in gst-plugins-bad. In the multi-slice-in-tile processing of gst_h266_parser_parse_picture_partition() (gsth266parser.c), the loop iterates without checking t…
-
Medium 6.5
Gstreamer1-plugins-bad-free: gstreamer: stack buffer overflow in h.265 buffering period sei parser
A stack buffer overflow flaw was found in the GStreamer H.265 codec parser library (gst-plugins-bad). When parsing a buffering period SEI message, the parser uses an incorrect loop bound derived from cpb_cnt_minus1[i] (the loop index) instead of the sub-layer…