This vulnerability (CVE-2026-52719) exists in the VA JPEG decoder within GStreamer's gst-plugins-bad-free package on Red Hat Enterprise Linux 10. The JPEG parser does not properly validate the segment length value read from the bitstream, resulting in an out-of-bounds read condition. This can cause the application processing the JPEG file to read beyond the provided input buffer, which may lead to a denial of service (crash) or potential information disclosure. The issue is tracked under CWE-125 (Out-of-bounds Read). Red Hat has issued an important security advisory (RHSA-2026:36749) with updated packages that fix this vulnerability in version 10.2.4 and later. The CVSS v3.1 base score is 7.1, indicating a high severity with network attack vector, low attack complexity, no privileges required, user interaction required, and impact on confidentiality (low) and availability (high). No known exploits are reported in the wild at this time.

Successful exploitation allows a remote attacker to cause an out-of-bounds read in the JPEG parser, potentially leading to application crashes (denial of service) or limited information disclosure. The vulnerability requires user interaction (opening a crafted JPEG file) and does not require privileges. The impact is rated high due to the possibility of denial of service and some confidentiality loss.

Red Hat has released an official security update that fixes this vulnerability in the gstreamer1-plugins-bad-free package for Red Hat Enterprise Linux 10. Systems running versions earlier than 10.2.4 are affected. Users should apply the update to version 10.2.4 or later as provided in Red Hat advisory RHSA-2026:36749. Refer to https://access.redhat.com/articles/11258 for update instructions. No additional mitigations are indicated by the vendor advisory.