Anmelden API-Schlüssel holen

5.5Mittel

CVE-2026-125706Gst-plugins-bad: gst-plugins-bad: missing bounds checks in mpeg ps pes header parsing

Red Hat Red Hat Enterprise Linux 10; Red Hat Red Hat Enterprise Linux 6; Red Hat Red Hat Enterprise Linux 7; Red Hat Red Hat Enterprise Linux 8 Veröffentlicht: 2026-11-10 14:23 (gestern)

Beschreibung

A flaw was found in GStreamer's gst-plugins-bad MPEG Program Stream demuxer and resindvd DVD-playback plugin. The PES header parsers do not adequately check remaining data before reading timestamps and optional header fields. Opening a specially crafted MPEG Program Stream file can cause an out-of-bounds read and potentially crash the application, resulting in a denial of service.

Schwachstellentyp (CWE): CWE-125

Daten: CVE.org, NVD, CISA KEV, FIRST EPSS, Ubuntu. Wiedergegeben wie in der Quelle, auf Englisch.

Betroffene Produkte und Versionen

Hersteller	Produkt	Versionen
Red Hat	Red Hat Enterprise Linux 10	all versions
Red Hat	Red Hat Enterprise Linux 6	—
Red Hat	Red Hat Enterprise Linux 7	all versions
Red Hat	Red Hat Enterprise Linux 8	all versions
Red Hat	Red Hat Enterprise Linux 9	all versions

Referenzen und Patches

CVSS-Score

5.5Mittel

Quelle: redhat · CVSS 3.1

Angriffsvektor: Lokal
Komplexität: Niedrig
Rechte erforderlich: Keine
Benutzerinteraktion: Erforderlich
Geltungsbereich: Unverändert
Vertraulichkeit: Keine
Integrität: Keine
Verfügbarkeit: Hoch

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

Alle Scores (2)

cna	CVSS 3.1	5.5Mittel
secalert@redhat.com	CVSS 3.1	5.5Mittel

Zeitverlauf

ID reserviert2026-11-10
Veröffentlicht2026-11-10 14:23
Bei IP-DB eingegangen2026-11-10 15:03
Zuletzt aktualisiert2026-11-11 02:17

Vergeben von (CNA): redhat
NVD-Status: Awaiting Analysis

In der Quelle ansehen: CVE.org · NVD

Benachrichtigung bei neuen Schwachstellen in diesen Produkten

E-Mail-Warnungen aktivieren

Kostenlos · mit Konto · jederzeit abbestellbar

Neue CVEs im selben Produkt — Red Hat Enterprise Linux

6.3Mittel

CVE-2026-124745 vor 51 Minuten

Busybox: tar deferred hardlink target resolved through a deferred symlink escapes the extraction directory

Red Hat Red Hat Enterprise Linux 6; Red Hat Red Hat Hardened Images

A flaw was found in BusyBox. When extracting an archive, the tar utility improperly resolves deferred hardlink targets across symbolic links pointing outside the intended extraction directory. An attacker could provide a specially crafted archive that links t…

6.3Mittel

CVE-2026-124744 vor 51 Minuten

Busybox: cpio hardlink target not sanitized under feature_path_traversal_protection

Red Hat Red Hat Enterprise Linux 6; Red Hat Red Hat Hardened Images

A flaw was found in BusyBox. When extracting files using the cpio utility with path traversal protection enabled, hardlink target paths are not properly sanitized. By tricking a user or automated process into extracting a crafted archive, an attacker can crea…

7.6Hoch

CVE-2026-124741 vor 2 Stunden

Busybox: stack buffer overflow in udhcpc6 send_d6_renew() and send_d6_release()

Red Hat Red Hat Enterprise Linux 6; Red Hat Red Hat Hardened Images

A flaw was found in BusyBox. The udhcpc6 DHCPv6 client does not properly validate the size of network options sent by a server before copying them into memory. A malicious DHCPv6 server on the local network can exploit this flaw by sending a crafted reply, tr…

7.5Hoch

CVE-2026-124739 vor 2 Stunden

Busybox: httpd stack buffer overflow via an "i:" rule in a subdirectory httpd.conf

Red Hat Red Hat Enterprise Linux 6; Red Hat Red Hat Hardened Images

A flaw was found in BusyBox. When the httpd web server processes subdirectory configuration files, an overly long index page name can trigger a stack-based buffer overflow. An attacker with permissions to write to a subdirectory configuration file could explo…

7.5Hoch

CVE-2026-124737 vor 3 Stunden

Busybox: heap buffer overflow in the tftp client on fallback to the default block size

Red Hat Red Hat Enterprise Linux 6; Red Hat Red Hat Hardened Images

A flaw was found in BusyBox. When the TFTP (Trivial File Transfer Protocol) client requests a custom small block size and receives a standard response, it falls back to the default block size without resizing the allocated memory buffer. A malicious TFTP serv…

6.5Mittel

CVE-2026-121885 vor 22 Stunden

Podman: untrusted image labels allow auto-update to restart arbitrary systemd units

podman; Red Hat Red Hat Enterprise Linux 10; Red Hat Red Hat Enterprise Linux 8; Red Hat Red Hat Enterprise Linux 9

A flaw was found in Podman. An attacker can trigger a Denial of Service (DoS) by supplying a container image containing crafted metadata labels. Podman's auto-update mechanism improperly trusts these image labels to determine which system services to restart.…