UBUNTU-CVE-2026-125703: Medium severity ubuntu/gst-plugins-bad1.0 vulnerability
Published Nov 12, 2026
·Updated
A flaw was found in the GStreamer gst-plugins-bad MXF plugin. Insufficient bounds checks when parsing crafted VANC data can cause an out-of-bounds read in the demuxer, while an incorrect buffer size calculation when muxing multiple ancillary packets can cause an out-of-bounds write. Processing affected content may crash the application, resulting in a denial of service.
Affected Software
7 affected components
ubuntu/gst-plugins-bad1.0*
ubuntu/gst-plugins-bad1.0*
ubuntu/gst-plugins-bad1.0*
ubuntu/gst-plugins-bad1.0*
ubuntu/gst-plugins-bad1.0*
ubuntu/gst-plugins-bad1.0*
ubuntu/gst-plugins-bad1.0*
Event History
Nov 12, 2026
CVE Published
via OSV·12:00 AM
Data Sourced
via OSV·12:00 AM
DescriptionSeverityAffected Software