Bug 2569129 (CVE-2026-125703) - CVE-2026-125703 gst-plugins-bad: gst-plugins-bad: Bounds check errors in MXF VANC packet handling
Summary: CVE-2026-125703 gst-plugins-bad: gst-plugins-bad: Bounds check errors in MXF ...
Keywords:
Status: NEW
Alias: CVE-2026-125703
Product: Security Response
Classification: Other
Component: vulnerability
Version: unspecified
Hardware: All
OS: Linux
medium
medium
Target Milestone: ---
Assignee: Product Security DevOps Team
QA Contact:
URL:
Whiteboard:
Depends On: 2569386 2569387
Blocks:
TreeView+ depends on / blocked
 
Reported: 2026-11-09 12:56 UTC by OSIDB Bzimport
Modified: 2026-11-10 10:35 UTC (History)
2 users (show)

Fixed In Version:
Clone Of:
Environment:
Last Closed:
Embargoed:

Attachments (Terms of Use)

Description OSIDB Bzimport 2026-11-09 12:56:17 UTC 
GStreamer-SA-2026-0029: Incorrect or insufficient bounds checks in MXF VANC packet handling affect the demuxer and muxer. Crafted MXF content may trigger unchecked bit/byte reader accesses, invalid array handling, or incorrect packet and wrapper sizes, potentially causing crashes, data corruption, or denial of service. Fixed in gst-plugins-bad 1.28.3.
Note You need to log in before you can comment on or make changes to this bug.