Threats affecting pkg:rpm/redhat/gst-plugins-good

CVE-2026-125041 is a vulnerability in GStreamer's gst-plugins-good MOV/MP4 demuxer used in Red Hat Enterprise Linux 10. The flaw involves improper validation of declared row alignment and chroma geometry in uncompressed video tracks, leading to an out-of-bounds heap read. This can cause the application processing the crafted file to crash, resulting in a denial of service condition. The issue is addressed in gst-plugins-good version 1.28.3 and later.