REDHAT-BUG-2569127: Medium severity GStreamer gst-plugins-bad vulnerability

Q: What conditions are required for exploitation?

An attacker would need to provide a crafted MXF file that is processed by the mxfdemux component. The malformed reverse temporal offset triggers a one-element out-of-bounds read.

Q: What impact should be expected if the flaw is triggered?

The reported impacts are a crash or denial of service, with possible information disclosure. The available information does not state that code execution is possible.

Q: Which release includes the fix?

The issue is fixed in gst-plugins-bad 1.28.3.

Published Nov 9, 2026

Updated

GStreamer-SA-2026-0027 (CVE-2026-XXXX pending): An off-by-one bounds check in mxfdemux uses a greater-than comparison instead of greater-than-or-equal when validating array access for reverse temporal offsets. A crafted MXF file can cause a one-element out-of-bounds read, potentially resulting in a crash, denial of service, or information disclosure. Fixed in gst-plugins-bad 1.28.3.

Affected Software

1 affected component

GStreamer gst-plugins-bad<1.28.3

Remediation

Recommended actions to resolve this vulnerability, in priority order.

Upgrade
Upgrade gst-plugins-bad to a version that resolves this vulnerability.
Fixed in 1.28.3

Event History

Nov 9, 2026

Data Sourced

via Red Hat·12:56 PM

DescriptionSeverityAffected Software

Frequently Asked Questions

What conditions are required for exploitation?

An attacker would need to provide a crafted MXF file that is processed by the mxfdemux component. The malformed reverse temporal offset triggers a one-element out-of-bounds read.

What impact should be expected if the flaw is triggered?

The reported impacts are a crash or denial of service, with possible information disclosure. The available information does not state that code execution is possible.

Which release includes the fix?

The issue is fixed in gst-plugins-bad 1.28.3.

REDHAT-BUG-2569127: Medium severity GStreamer gst-plugins-bad vulnerability

Affected Software

Remediation

Event History

Frequently Asked Questions

What conditions are required for exploitation?

What impact should be expected if the flaw is triggered?

Which release includes the fix?

Company

Resources

Contact

Frequently Asked Questions

What conditions are required for exploitation?

What impact should be expected if the flaw is triggered?

Which release includes the fix?