PT-2026-48725 · Red Hat · Red Hat Enterprise Linux 10+3

Published 2026-06-11 · Updated 2026-06-11 · CVE-2026-53702

NVD

CVSS v3.1

6.5

Medium

Base vector

AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

A stack buffer overflow flaw was found in the GStreamer H.265 codec parser library (gst-plugins-bad). When parsing a buffering period SEI message, the parser uses an incorrect loop bound derived from cpb cnt minus1[i] (the loop index) instead of the sub-layer 0 CPB count cpb cnt minus1[0] from the referenced Sequence Parameter Set. A crafted H.265 video file or stream can cause the parser to write beyond the bounds of stack-allocated CPB delay arrays, resulting in a crash or potential stack memory corruption.

Fix

Memory Corruption

Weakness Enumeration

CWE-787

Related Identifiers

CVE-2026-53702

Affected Products

Red Hat Enterprise Linux 10

Red Hat Enterprise Linux 7

Red Hat Enterprise Linux 8

Red Hat Enterprise Linux 9

References · 3

• https://nvd.nist.gov/vuln/detail/CVE-2026-53702 · Security Note
• https://access.redhat.com/security/cve/CVE-2026-53702 · Note
• https://bugzilla.redhat.com/show_bug.cgi?id=2487612 · Note