Threats Tagged 'cve-2026-52719'

Multiple security vulnerabilities have been identified in the gstreamer1-plugins-bad-free package used in Red Hat Enterprise Linux 10 and related products. These include denial of service, out-of-bounds read, heap buffer overflow, and signed integer overflow issues affecting various decoders and components within GStreamer. Red Hat has released an important security update addressing these issues.

Multiple security vulnerabilities have been identified in the gstreamer1-plugins-bad-free package used in Red Hat Enterprise Linux 9 and related distributions. These include denial of service, out-of-bounds read, heap buffer overflow, and signed integer overflow issues affecting various decoders and components within GStreamer. The vulnerabilities have been assigned CVEs CVE-2026-52718, CVE-2026-52719, CVE-2026-52720, and CVE-2026-52722. Red Hat has issued a security advisory with updates to address these issues.

CVE-2026-52719 is an out-of-bounds read vulnerability in the VA JPEG decoder component of GStreamer's gst-plugins-bad package used in Red Hat Enterprise Linux 10. The vulnerability arises because the JPEG parser reads a segment length from the bitstream without validating it against the available input data. A remote attacker could exploit this by tricking a user into opening a specially crafted JPEG file, which may cause the parser to read beyond the input buffer, potentially leading to a crash or information disclosure. Red Hat has released an important security update addressing this issue in versions 10.2.4 and later.