{"id":"CVE-2026-125706","kind":"vulnerability","aliases":["CVE-2026-125706"],"related":[],"title":"GStreamer: crafted MPEG program stream file can crash media playback","description":"A flaw was found in GStreamer's gst-plugins-bad MPEG Program Stream demuxer and resindvd DVD-playback plugin. The PES header parsers do not adequately check remaining data before reading timestamps and optional header fields. Opening a specially crafted MPEG Program Stream file can cause an out-of-bounds read and potentially crash the application, resulting in a denial of service.","summary":"A flaw in GStreamer's gst-plugins-bad MPEG Program Stream demuxer and the resindvd DVD plugin lets a malformed file trigger an out-of-bounds read. The result is a crash of the application that opens the file, a denial of service.","severity":"medium","cvss":5.5,"epss":null,"exploited":false,"exploited_at":null,"products":[{"name":"gst-plugins-bad","fixed":[],"affected":"","ecosystem":"vendor"}],"ecosystems":["vendor"],"tags":["gstreamer","linux","media-playback","runtime"],"not_affected_if":["dvd-plugin-absent","no-untrusted-media"],"how_to_check":null,"fix":null,"status":"open","published_at":"2026-11-10T12:17:18+00:00","first_seen_at":"2026-11-10T12:21:54+00:00","triaged_at":"2026-11-10T12:22:43+00:00","updated_at":"2026-11-10T12:22:43+00:00","category":"runtime","confidence":0.6,"triage":{"at":"2026-11-10T12:22:43Z","model":"claude-haiku-5-5","output":{"fix":"unknown","reach":"local","title":"GStreamer: crafted MPEG program stream file can crash media playback","impact":"low","summary":"A flaw in GStreamer's gst-plugins-bad MPEG Program Stream demuxer and the resindvd DVD plugin lets a malformed file trigger an out-of-bounds read. The result is a crash of the application that opens the file, a denial of service.","audience":"businesses","category":"runtime","nicknames":[],"who_cares":["gstreamer","media-playback","linux"],"confidence":0.6,"fix_status":"unknown","needs_auth":"no","worst_case":"application crashes when opening a crafted file","analyst_note":"Find the affected and fixed gst-plugins-bad versions from the NVD entry or the GStreamer advisory.","how_to_check":"- Check whether the GStreamer gst-plugins-bad package is installed, for example with `gst-inspect-1.0 mpegpsdemux`\n- unknown for the rest: the sources do not say which versions are affected","plain_action":"","product_name":"gst-plugins-bad","needs_analyst":true,"not_affected_if":["no-untrusted-media","dvd-plugin-absent"],"who_is_affected":"Applications that use GStreamer to open MPEG Program Stream or DVD media, including the resindvd plugin, are exposed when they process untrusted files. Systems that never open such files can skip it. The sources do not list affected versions.","user_interaction":"yes","product_ecosystem":"vendor","needs_special_setup":"unknown","severity_if_unknown":"unknown"},"cost_usd":0.000737,"input_tokens":4596,"output_tokens":555,"severity_before":"medium"},"analyst_status":null,"analyst_note":null,"search":"'-125706':13A,16A '-2026':12A,15A 'adequ':99C 'applic':63B,130C 'bad':20A,35B,82C 'bound':54B,124C 'caus':119C 'check':100C 'craft':2A,113C 'crash':8A,60B,128C 'cve':11A,14A 'data':102C 'demux':39B,86C 'denial':69B,134C 'dvd':43B,90C 'dvd-playback':89C 'field':109C 'file':6A,48B,67B,117C 'flaw':28B,73C 'found':75C 'gst':18A,33B,80C 'gst-plugins-bad':17A,32B,79C 'gstreamer':1A,21B,30B,77C 'header':95C,108C 'let':45B 'linux':22B 'malform':47B 'media':9A,24B 'media-playback':23B 'mpeg':3A,36B,83C,114C 'open':65B,110C 'option':107C 'out-of-bound':51B,121C 'parser':96C 'pes':94C 'playback':10A,25B,91C 'plugin':34B,44B,81C,92C 'plugins':19A 'potenti':127C 'program':4A,37B,84C,115C 'read':55B,104C,125C 'remain':101C 'resindvd':42B,88C 'result':57B,131C 'runtim':26B 'servic':71B,136C 'special':112C 'stream':5A,38B,85C,116C 'timestamp':105C 'trigger':49B","nicknames":[],"mitigations":[],"who_affected":"Applications that use GStreamer to open MPEG Program Stream or DVD media, including the resindvd plugin, are exposed when they process untrusted files. Systems that never open such files can skip it. The sources do not list affected versions.","tier":"C","verified":{},"analyst_revisit_at":null,"fix_status":"none","audience":"businesses","plain_action":null,"pkeys":["gstpluginsbad"],"ptokens":["bad","gst","plugins"],"labels":["gstreamer","linux","mediaplayback","medium","runtime","vendor"],"campaign_type":null,"search_a":"'-125706':13A,16A '-2026':12A,15A 'bad':20A 'craft':2A 'crash':8A 'cve':11A,14A 'file':6A 'gst':18A 'gst-plugins-bad':17A 'gstreamer':1A 'media':9A 'mpeg':3A 'playback':10A 'plugins':19A 'program':4A 'stream':5A","search_b":"'applic':63B 'bad':35B 'bound':54B 'crash':60B 'demux':39B 'denial':69B 'dvd':43B 'file':48B,67B 'flaw':28B 'gst':33B 'gst-plugins-bad':32B 'gstreamer':21B,30B 'let':45B 'linux':22B 'malform':47B 'media':24B 'media-playback':23B 'mpeg':36B 'open':65B 'out-of-bound':51B 'playback':25B 'plugin':34B,44B 'program':37B 'read':55B 'resindvd':42B 'result':57B 'runtim':26B 'servic':71B 'stream':38B 'trigger':49B","search_c":"'adequ':99C 'applic':130C 'bad':82C 'bound':124C 'caus':119C 'check':100C 'craft':113C 'crash':128C 'data':102C 'demux':86C 'denial':134C 'dvd':90C 'dvd-playback':89C 'field':109C 'file':117C 'flaw':73C 'found':75C 'gst':80C 'gst-plugins-bad':79C 'gstreamer':77C 'header':95C,108C 'mpeg':83C,114C 'open':110C 'option':107C 'out-of-bound':121C 'parser':96C 'pes':94C 'playback':91C 'plugin':81C,92C 'potenti':127C 'program':84C,115C 'read':104C,125C 'remain':101C 'resindvd':88C 'result':131C 'servic':136C 'special':112C 'stream':85C,116C 'timestamp':105C","cause_entry":null,"cause_path":null,"disclosures_checked_at":null,"first_public_at":"2026-11-10T12:17:18+00:00","kev":null,"cvss_vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","cvss_by":"secalert@redhat.com","poc_count":0,"sources":[{"source":"nvd","external_id":"CVE-2026-125706","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-125706","severity":null,"published_at":"2026-11-10T12:17:18+00:00","modified_at":"2026-11-10T12:17:18+00:00","first_seen_at":"2026-11-10T12:21:54+00:00","fetched_at":"2026-11-10T12:21:54+00:00","note":null}],"documents":[],"disclosures":[],"exploit_sources":[],"notice":"Free to read, with fair use of about 60 pages a minute. For higher limits or API access: sales@infrastack.ai"}