CVE-2026-52722

Name of the Vulnerable Software and Affected Versions GStreamer (affected versions not specified)

Description A signed integer overflow exists in the VMnc decoder. A specially crafted VMnc stream containing large cursor dimensions can cause an overflow in signed integer payload-size arithmetic. This allows the bypass of a length check, resulting in out-of-bounds reads, which occur when a program reads data past the end of the intended buffer. A remote attacker could exploit this by tricking a user into opening a malicious VMnc file, potentially leading to information disclosure or a system crash.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.