CVE-2026-119777

Name of the Vulnerable Software and Affected Versions GStreamer (affected versions not specified)

Description A flaw exists in the gst-plugins-bad H.266/VVC parser. Processing a malformed H.266 media file or stream can trigger an integer overflow while parsing profile, tier, and level fields, resulting in a stack-based buffer overflow. This may lead to an application crash or remote code execution within the context of the affected application.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.