Threats Tagged 'cve-2026-53702'

Multiple vulnerabilities have been identified in GStreamer, an open source multimedia framework with a plugin-based architecture supporting various platforms. The advisory from the Bundesamt für Sicherheit in der Informationstechnik references a total of 10 CVEs related to this issue. No specific affected versions or detailed technical descriptions are provided. There is no information about known exploits in the wild or available patches at this time.

A stack buffer overflow flaw was found in the GStreamer H.265 codec parser library (gst-plugins-bad). When parsing a buffering period SEI message, the parser uses an incorrect loop bound derived from cpb_cnt_minus1[i] (the loop index) instead of the sub-layer 0 CPB count cpb_cnt_minus1[0] from the referenced Sequence Parameter Set. A crafted H.265 video file or stream can cause the parser to write beyond the bounds of stack-allocated CPB delay arrays, resulting in a crash or potential stack memory corruption.