CVE-2026-119728

Name of the Vulnerable Software and Affected Versions gst-plugins-bad (affected versions not specified)

Description A flaw exists in the H.264 video parser. When processing a specially crafted H.264 video file containing malformed Multiview (MVC) Sequence Parameter Set data, the parser may dereference a NULL pointer—a situation where the program attempts to read a memory address that points to nothing—during the cleanup of partially allocated internal structures following a parse failure. This leads to an application crash and a subsequent denial of service.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.