CVE-2026-53701

Name of the Vulnerable Software and Affected Versions GStreamer (affected versions not specified)

Description An out-of-bounds write occurs in the H.266/VVC PPS picture partition parser within the gst-plugins-bad component. In the multi-slice-in-tile processing of the gst h266 parser parse picture partition() function (gsth266parser.c), a loop iterates without verifying that the slice index remains within bounds. This allows writing past three fixed-size arrays (slice height in ctus, slice top left ctu x, and slice top left ctu y) in the GstH266PPS structure. A crafted H.266/VVC media file can trigger this issue, potentially allowing writes larger than 4 bytes across multiple iterations.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.