CVE-2026-53702

Name of the Vulnerable Software and Affected Versions GStreamer (affected versions not specified)

Description A stack buffer overflow exists in the GStreamer H.265 codec parser library (gst-plugins-bad). The issue occurs when parsing a buffering period SEI message, where the parser utilizes an incorrect loop bound derived from cpb cnt minus1[i] instead of the sub-layer 0 CPB count cpb cnt minus1[0] from the referenced Sequence Parameter Set. A specially crafted H.265 video file or stream can trigger this flaw, causing the parser to write beyond the bounds of stack-allocated CPB delay arrays, which may lead to a crash or stack memory corruption.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.