Vulnerability Description
A flaw was found in GStreamer's gst-plugins-bad package. When processing a specially crafted H.264 video file containing malformed MVC or SVC extension slice NAL units, a 1-byte heap out-of-bounds read can occur during parsing. This happens when the parser attempts to check slice boundary information without first verifying that the NAL unit contains enough data beyond the extension header. An attacker could exploit this by tricking a user into opening a malicious H.264 video file, potentially causing the application to crash or leak a single byte of heap memory.
CVSS Score
MEDIUM
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Gstreamer | Gstreamer | - |
| Redhat | Enterprise Linux | 6.0 |
Related Weaknesses (CWE)
References
- https://access.redhat.com/security/cve/CVE-2026-12892Vendor Advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=2491321Vendor AdvisoryIssue Tracking
- https://gitlab.freedesktop.org/gstreamer/gstreamer/-/work_items/5108Not Applicable
FAQ
What is CVE-2026-12892?
CVE-2026-12892 is a vulnerability with a CVSS score of 4.4 (MEDIUM). A flaw was found in GStreamer's gst-plugins-bad package. When processing a specially crafted H.264 video file containing malformed MVC or SVC extension slice NAL units, a 1-byte heap out-of-bounds rea...
How severe is CVE-2026-12892?
CVE-2026-12892 has been rated MEDIUM with a CVSS base score of 4.4/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2026-12892?
Check the references section above for vendor advisories and patch information. Affected products include: Gstreamer Gstreamer, Redhat Enterprise Linux.