CVE-2026-52719

Name of the Vulnerable Software and Affected Versions GStreamer gst-plugins-bad (affected versions not specified)

Description An out-of-bounds read occurs in the VA JPEG decoder within the gst-plugins-bad module. The JPEG parser reads a segment length value from the bitstream without validating it against the available data. A remote attacker can exploit this by inducing a user to open a specially crafted JPEG file, which causes the parsing process to read beyond the input buffer, potentially resulting in a crash or information disclosure.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.