CVE-2026-52718

Name of the Vulnerable Software and Affected Versions GStreamer (affected versions not specified)

Description A denial of service issue exists in the AV1 codec parser within gst-plugins-bad. The gst av1 parser parse tile list obu() function incorrectly passes a byte count to a bit-reader API that expects a bit count, leading to parser desynchronization. A remote attacker can cause the application to crash via an assertion abort by tricking a user into opening a specially crafted AV1 media file.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.