A vulnerability in GStreamer's gst-plugins-bad H.265 video parser allows a specially crafted H.265 bitstream with a Screen Content Coding (SCC) extension to trigger an integer underflow. This leads to out-of-bounds writes beyond a fixed-size array, causing memory corruption and application crashes. Exploitation requires a malformed H.265 media file and results in denial of service without confidentiality or integrity impact. Red Hat Enterprise Linux 7 and 8 are not affected; RHEL 9, 10, and Red Hat In-Vehicle OS are affected but no fix is currently available. Fedora 44 and rawhide include the fix, while Fedora 43 remains vulnerable.