A vulnerability in the GStreamer gst-plugins-bad MXF plugin allows crafted VANC data to cause out-of-bounds reads and incorrect buffer size calculations to cause out-of-bounds writes. This can lead to application crashes and denial of service when processing malicious MXF content. The flaw affects multiple Red Hat Enterprise Linux versions up to 10.3, with later versions not affected. No confidentiality or integrity impacts are established. Mitigation involves disabling the MXF plugin if not needed or restricting MXF inputs to trusted sources.