REDHAT-BUG-2565686: Integer Overflow

Published Nov 3, 2026

Updated

GStreamer-SA-2026-0015 reports integer overflows and division by zero in the jp2kdecimator element of gst-plugins-bad when it processes malformed JPEG 2000 codestreams. Insufficient bounds checks in size validation and tile configuration parsing permit multiplication overflows and a zero tile dimension to reach division. A crafted JPEG 2000 stream or media file can crash the GStreamer application, causing denial of service. Upstream identifies gst-plugins-bad versions before 1.28.2 as affected and 1.28.2 as the fixed release. The advisory was published on 2026-04-07 and does not identify the original reporter or supply a public proof of concept. This record is based on the upstream advisory and release notes; no independent source review or dynamic reproduction has been completed. Advisory: https://gstreamer.freedesktop.org/security/sa-2026-0015.html

Affected Software

0 affected components

Event History

Nov 3, 2026

Data Sourced

via Red Hat·10:46 AM

DescriptionSeverityAffected Software

Frequently Asked Questions

Which deployments are exposed?

GStreamer applications that use the gst-plugins-bad jp2kdecimator element and process untrusted or malformed JPEG 2000 codestreams or media files are exposed. Upstream identifies gst-plugins-bad versions before 1.28.2 as affected.

What must an attacker provide to trigger the issue?

An attacker needs to cause the application to process a crafted JPEG 2000 stream or media file. The malformed input can trigger integer overflows during size validation or tile parsing, or a division by zero from a zero tile dimension.

What is the impact of successful exploitation?

Successful exploitation can crash the GStreamer application, resulting in denial of service. The provided advisory information does not describe impacts beyond application crash.

What is the available remediation?

Update gst-plugins-bad to version 1.28.2, which upstream identifies as the fixed release. If updating cannot be done immediately, avoid processing untrusted JPEG 2000 content through the jp2kdecimator element.

REDHAT-BUG-2565686: Integer Overflow

Affected Software

Event History

Frequently Asked Questions

Which deployments are exposed?

What must an attacker provide to trigger the issue?

What is the impact of successful exploitation?

What is the available remediation?

Company

Resources

Contact

Frequently Asked Questions

Which deployments are exposed?

What must an attacker provide to trigger the issue?

What is the impact of successful exploitation?

What is the available remediation?