An out-of-bounds read vulnerability exists in the VA JPEG decoder within GStreamer's gst-plugins-bad on Red Hat Enterprise Linux 10. The JPEG parser does not validate the segment length value read from the bitstream against the actual available data, which can cause downstream parsing to read beyond the input buffer. This flaw can be triggered remotely by convincing a user to open a maliciously crafted JPEG file, potentially resulting in application crash or information disclosure. The vulnerability is tracked as CVE-2026-52719 with a CVSS score of 7.1 (AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:H). The vendor advisory does not specify a remediation level or patch availability.

A remote attacker can exploit this vulnerability by tricking a user into opening a specially crafted JPEG file. This can cause the JPEG parser to read out-of-bounds memory, leading to a denial of service (application crash) or potential information disclosure. The vulnerability does not impact integrity but affects availability and confidentiality to a limited extent.

Patch status is not yet confirmed — check the Red Hat advisory at https://access.redhat.com/security/cve/CVE-2026-52719 for current remediation guidance. Until an official fix is available, users should exercise caution when opening JPEG files from untrusted sources. No vendor-provided workaround or temporary fix is currently documented.