{"id":"CVE-2026-125703","aliases":["EUVD-2026-120870","GHSA-wq95-fg67-jvc5"],"status":"published","title":"Gst-plugins-bad: gst-plugins-bad: bounds check errors in mxf vanc packet handling","description":"A flaw was found in the GStreamer gst-plugins-bad MXF plugin. Insufficient bounds checks when parsing crafted VANC data can cause an out-of-bounds read in the demuxer, while an incorrect buffer size calculation when muxing multiple ancillary packets can cause an out-of-bounds write. Processing affected content may crash the application, resulting in a denial of service.","severity":{"version":"3.1","score":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","level":"medium","assessor":"cna","from":"cve"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-20"],"published":"2026-11-10T10:43:44Z","modified":"2026-11-11T02:47:51Z","products":[{"vendor":"red hat","product":"red hat enterprise linux 10"},{"vendor":"red hat","product":"red hat enterprise linux 6"},{"vendor":"red hat","product":"red hat enterprise linux 7"},{"vendor":"red hat","product":"red hat enterprise linux 8"},{"vendor":"red hat","product":"red hat enterprise linux 9"}],"references":[{"url":"https://access.redhat.com/security/cve/CVE-2026-125703","tags":["vdb-entry","x_refsource_REDHAT","advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2569129","tags":["issue-tracking","x_refsource_REDHAT","report"]},{"url":"https://gitlab.freedesktop.org/gstreamer/gstreamer/-/merge_requests/11585","tags":["fix"]},{"url":"https://gstreamer.freedesktop.org/security/sa-2026-0029.html","tags":["web"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-125703","tags":["advisory"]},{"url":"https://github.com/advisories/GHSA-wq95-fg67-jvc5"},{"url":"https://access.redhat.com/downloads/content/package-browser/","tags":["web"]},{"url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/125xxx/CVE-2026-125703.json","tags":["advisory"]},{"url":"https://gitlab.freedesktop.org/gstreamer/gstreamer","tags":["package"]}],"sources":{"cve":[{"id":"CVE-2026-125703","title":"Gst-plugins-bad: gst-plugins-bad: bounds check errors in mxf vanc packet handling","description":"A flaw was found in the GStreamer gst-plugins-bad MXF plugin. Insufficient bounds checks when parsing crafted VANC data can cause an out-of-bounds read in the demuxer, while an incorrect buffer size calculation when muxing multiple ancillary packets can cause an out-of-bounds write. Processing affected content may crash the application, resulting in a denial of service.","status":"published","published":"2026-11-10T10:43:44.507Z","modified":"2026-11-10T22:18:54.997Z","cvss":[{"version":"3.1","score":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","level":"medium","assessor":"cna"}],"cwes":["CWE-20"],"updated_at":"2026-11-10T23:49:28.582338Z"}],"euvd":[{"id":"EUVD-2026-120870","description":"A flaw was found in the GStreamer gst-plugins-bad MXF plugin. Insufficient bounds checks when parsing crafted VANC data can cause an out-of-bounds read in the demuxer, while an incorrect buffer size calculation when muxing multiple ancillary packets can cause an out-of-bounds write. Processing affected content may crash the application, resulting in a denial of service.","status":"published","published":"2026-11-10T10:43:44Z","modified":"2026-11-10T22:18:54Z","cvss":[{"version":"3.1","score":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-10T23:24:16.163953Z"}],"ghsa":[{"id":"GHSA-wq95-fg67-jvc5","title":"A flaw was found in the GStreamer gst-plugins-bad MXF plugin. Insufficient bounds checks when...","description":"A flaw was found in the GStreamer gst-plugins-bad MXF plugin. Insufficient bounds checks when parsing crafted VANC data can cause an out-of-bounds read in the demuxer, while an incorrect buffer size calculation when muxing multiple ancillary packets can cause an out-of-bounds write. Processing affected content may crash the application, resulting in a denial of service.","status":"published","published":"2026-11-10T12:31:47Z","modified":"2026-11-10T12:31:51Z","cvss":[{"version":"3.1","score":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","level":"medium"}],"cwes":["CWE-20"],"updated_at":"2026-11-10T12:54:11.217132Z"}],"nvd":[{"id":"CVE-2026-125703","description":"A flaw was found in the GStreamer gst-plugins-bad MXF plugin. Insufficient bounds checks when parsing crafted VANC data can cause an out-of-bounds read in the demuxer, while an incorrect buffer size calculation when muxing multiple ancillary packets can cause an out-of-bounds write. Processing affected content may crash the application, resulting in a denial of service.","status":"published","published":"2026-11-10T11:16:43.417Z","modified":"2026-11-10T23:17:20.32Z","cvss":[{"version":"3.1","score":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","level":"medium","assessor":"secondary"}],"cwes":["CWE-20"],"updated_at":"2026-11-10T14:19:29.397466Z"}],"osv":[{"id":"CVE-2026-125703","title":"Gst-plugins-bad: gst-plugins-bad: bounds check errors in mxf vanc packet handling","description":"A flaw was found in the GStreamer gst-plugins-bad MXF plugin. Insufficient bounds checks when parsing crafted VANC data can cause an out-of-bounds read in the demuxer, while an incorrect buffer size calculation when muxing multiple ancillary packets can cause an out-of-bounds write. Processing affected content may crash the application, resulting in a denial of service.","status":"published","published":"2026-11-10T10:43:44.507Z","modified":"2026-11-11T02:47:51.725842222Z","cvss":[{"version":"3.1","score":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","level":"medium"}],"cwes":["CWE-20"],"updated_at":"2026-11-11T03:22:28.447808Z"}]}}