The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report
A flaw was found in the GStreamer gst-plugins-bad package. When processing a malformed H.266/VVC video stream with a crafted aspect ratio indicator value, the H.266 parser performs an out-of-bounds read of up to 8 bytes from adjacent memory. This flaw allows an attacker to craft a malicious H.266 video file or stream that, when processed by a GStreamer-based application, could leak limited memory contents through video metadata, potentially exposing sensitive information from the application's address space.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade gst-plugins-bad1.0 | Aug 23, 2026 | Aug 23, 2026 |
| Freebsd | — | Upgrade gstreamer1-libavUpgrade gstreamer1-plugins-uglyUpgrade gstreamer1-plugins-goodUpgrade gstreamer1-plugins-badUpgrade gstreamer1-plugins | Jun 30, 2026 | Jun 29, 2026 |
| Redhat_linux | — | No solution exists | Jul 17, 2026 | Jun 23, 2026 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub