An out-of-bounds read vulnerability was found in the VA JPEG decoder in GStreamer's gst-plugins-bad. The JPEG parser reads a segment length value from the bitstream without validating it against available data. A remote attacker could trick a user into opening a specially crafted JPEG file, causing downstream parsing to read beyond the provided input buffer, leading to a crash or potential information disclosure.
References
Configurations
No configuration.
History
30 Jul 2026, 12:19
| Type | Values Removed | Values Added |
|---|---|---|
| References | () https://access.redhat.com/errata/RHSA-2026:47717 - |
30 Jul 2026, 08:16
| Type | Values Removed | Values Added |
|---|---|---|
| References |
|
29 Jul 2026, 13:18
| Type | Values Removed | Values Added |
|---|---|---|
| References | () https://access.redhat.com/errata/RHSA-2026:47070 - | |
| References | () https://access.redhat.com/errata/RHSA-2026:47071 - |
28 Jul 2026, 17:16
| Type | Values Removed | Values Added |
|---|---|---|
| References |
|
09 Jul 2026, 13:17
| Type | Values Removed | Values Added |
|---|---|---|
| References | () https://access.redhat.com/errata/RHSA-2026:36749 - | |
| References | () https://access.redhat.com/errata/RHSA-2026:36834 - |
09 Jul 2026, 00:17
| Type | Values Removed | Values Added |
|---|---|---|
| References |
|
08 Jul 2026, 15:16
| Type | Values Removed | Values Added |
|---|---|---|
| References |
|
30 Jun 2026, 03:20
| Type | Values Removed | Values Added |
|---|---|---|
| References |
|
|
| References | () https://access.redhat.com/security/cve/CVE-2026-52719 - | |
| References | () https://bugzilla.redhat.com/show_bug.cgi?id=2486353 - |
15 Jun 2026, 20:16
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2026-06-15 20:16
Updated : 2026-07-30 12:19
NVD link : CVE-2026-52719
Mitre link : CVE-2026-52719
CVE.ORG link : CVE-2026-52719
JSON object : View
Products Affected
No product.
CWE
CWE-125
Out-of-bounds Read