UBUNTU-CVE-2026-121601: Medium severity ubuntu/gst-plugins-bad1.0 vulnerability
A flaw was found in GStreamer's MXF demuxer plugin (gst-plugins-bad). When processing a specially crafted MXF media file, the demuxer indexes its internal delta-entry and slice-offset tables using values from the file without validating that they are within the bounds of the allocated arrays. A local attacker who tricks a user into opening a malicious MXF file can cause the application to crash (denial of service) and may be able to read limited amounts of heap memory adjacent to the affected arrays.
Affected Software
Event History
Frequently Asked Questions
Who is realistically exposed to this issue?
Systems using Ubuntu's gst-plugins-bad1.0 package are exposed when an application processes MXF media files with the affected GStreamer MXF demuxer. Exploitation requires a local attacker to convince a user to open a specially crafted MXF file.
What impact can a malicious MXF file have?
The malformed file can cause the consuming application to crash, resulting in denial of service. It may also allow limited reading of heap memory adjacent to the demuxer's affected internal arrays.
Does exploitation require network access or prior code execution?
The available information describes a local attack delivered through a malicious MXF file opened by a user. It does not state that network access or prior code execution is required.