Track vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
6.5
CVE-2026-100229: Red Hat Enterprise Linux: crafted video can crash apps
CVE-2026-100229 · published 21 days ago
Summary
The GStreamer H.266 video library in Red Hat Enterprise Linux 7, 8, 9 and 10 can write past the end of a memory buffer when it processes a specially crafted video file. This could cause the application that uses the library to crash or experience memory corruption. Apply the latest security updates from Red Hat or upgrade the GStreamer packages to the patched versions.
What to do
The CVE record does not list a fixed version. Check the vendor's site or the advisory links below - a fix may already be released.
Affected software
| Ecosystem | Vendor | Product | Affected versions |
|---|---|---|---|
| – | red hat | red hat enterprise linux 10 | All versions |
| – | red hat | red hat enterprise linux 7 | All versions |
| – | red hat | red hat enterprise linux 8 | All versions |
| – | red hat | red hat enterprise linux 9 | All versions |
| Ubuntu:Pro:14.04:LTS | canonical | gst-plugins-bad1.0 | All versions |
| Debian:12 | debian | gst-plugins-bad1.0 | All versions |
Original advisory text
Gstreamer1-plugins-bad-free: gstreamer1-plugins-bad-free: out-of-bounds write in gst_h266_parser_parse_dci() due to off-by-one array bound check
A flaw was found in GStreamer's H.266 codec parser library (libgstcodecparsers). An out-of-bounds write vulnerability exists in the DCI parsing function, where a reserved field value is incorrectly accepted, causing the parser to write beyond the bounds of an internal structure. An attacker could exploit this by providing a specially crafted H.266 bitstream to a third-party application that uses this library API, potentially causing a crash or memory corruption. No standard GStreamer pipeline element currently invokes the affected code path.
References
- https://access.redhat.com/security/cve/CVE-2026-100229 Third Party Advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=2541471 Third Party Advisory
- https://ubuntu.com/security/CVE-2026-100229 Third Party Advisory
- https://www.cve.org/CVERecord?id=CVE-2026-100229 Third Party Advisory
- https://security-tracker.debian.org/tracker/CVE-2026-100229 Vendor Advisory
Internet-facing
14 days
Internal
60 days
- Not known to be exploited
- Can be exploited automatically
- Gives an attacker partial control
Type
CWE-787Out-of-bounds Write
Timeline
Published15 Oct 2026
Updated3 Nov 2026
First seen14 Oct 2026
Sources
CVE-2026-100229 · NVD
CVE-2026-100229 · MITRE
UBUNTU-CVE-2026-100229 · OSV
DEBIAN-CVE-2026-100229 · OSV
Track software like this
Free during beta