Anmelden API-Schlüssel holen

6.1Mittel

CVE-2026-125707Gst-plugins-bad: gst-plugins-bad: off-by-one write in mxf demuxer temporal offset table

Red Hat Red Hat Enterprise Linux 10; Red Hat Red Hat Enterprise Linux 6; Red Hat Red Hat Enterprise Linux 7; Red Hat Red Hat Enterprise Linux 8 Veröffentlicht: 2026-11-10 14:23 (gestern)

Beschreibung

A flaw was found in GStreamer's MXF demuxer. When an application processes a crafted MXF file, an off-by-one bounds check can allow a one-byte write past the logical end of a temporal offset array. This may corrupt memory and cause the application to crash. The extent of the impact has not been demonstrated by a runtime test.

Schwachstellentyp (CWE): CWE-787

Daten: CVE.org, NVD, CISA KEV, FIRST EPSS, Ubuntu. Wiedergegeben wie in der Quelle, auf Englisch.

Betroffene Produkte und Versionen

Hersteller	Produkt	Versionen
Red Hat	Red Hat Enterprise Linux 10	all versions
Red Hat	Red Hat Enterprise Linux 6	—
Red Hat	Red Hat Enterprise Linux 7	all versions
Red Hat	Red Hat Enterprise Linux 8	all versions
Red Hat	Red Hat Enterprise Linux 9	all versions

Referenzen und Patches

https://access.redhat.com/security/cve/CVE-2026-125707 vdb-entry
RHBZ#2569127 issue-tracking
https://gstreamer.freedesktop.org/security/sa-2026-0027.html

CVSS-Score

6.1Mittel

Quelle: redhat · CVSS 3.1

Angriffsvektor: Lokal
Komplexität: Niedrig
Rechte erforderlich: Keine
Benutzerinteraktion: Erforderlich
Geltungsbereich: Unverändert
Vertraulichkeit: Keine
Integrität: Niedrig
Verfügbarkeit: Hoch

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:H

Alle Scores (2)

cna	CVSS 3.1	6.1Mittel
secalert@redhat.com	CVSS 3.1	6.1Mittel

CISA-Bewertung (SSVC)

Ausnutzung: none
Automatisierbar: no
Technische Auswirkung: partial

Zeitverlauf

ID reserviert2026-11-10
Veröffentlicht2026-11-10 14:23
Bei IP-DB eingegangen2026-11-10 15:03
Zuletzt aktualisiert2026-11-11 02:17

Vergeben von (CNA): redhat
NVD-Status: Awaiting Analysis

In der Quelle ansehen: CVE.org · NVD

Benachrichtigung bei neuen Schwachstellen in diesen Produkten

E-Mail-Warnungen aktivieren

Kostenlos · mit Konto · jederzeit abbestellbar

Neue CVEs im selben Produkt — Red Hat Enterprise Linux

5.5Mittel

CVE-2026-124746 vor 2 Stunden

Busybox: out-of-bounds read in volume_id_get_buffer() via an offset+length wraparound

Red Hat Red Hat Enterprise Linux 6; Red Hat Red Hat Hardened Images

A flaw was found in BusyBox. An integer overflow occurs in the volume_id component when calculating buffer boundaries while probing filesystem metadata. An attacker can exploit this vulnerability by providing a specially crafted filesystem image on an attache…

6.3Mittel

CVE-2026-124745 vor 5 Stunden

Busybox: tar deferred hardlink target resolved through a deferred symlink escapes the extraction directory

Red Hat Red Hat Enterprise Linux 6; Red Hat Red Hat Hardened Images

A flaw was found in BusyBox. When extracting an archive, the tar utility improperly resolves deferred hardlink targets across symbolic links pointing outside the intended extraction directory. An attacker could provide a specially crafted archive that links t…

6.3Mittel

CVE-2026-124744 vor 5 Stunden

Busybox: cpio hardlink target not sanitized under feature_path_traversal_protection

Red Hat Red Hat Enterprise Linux 6; Red Hat Red Hat Hardened Images

A flaw was found in BusyBox. When extracting files using the cpio utility with path traversal protection enabled, hardlink target paths are not properly sanitized. By tricking a user or automated process into extracting a crafted archive, an attacker can crea…

7.6Hoch

CVE-2026-124741 vor 7 Stunden

Busybox: stack buffer overflow in udhcpc6 send_d6_renew() and send_d6_release()

Red Hat Red Hat Enterprise Linux 6; Red Hat Red Hat Hardened Images

A flaw was found in BusyBox. The udhcpc6 DHCPv6 client does not properly validate the size of network options sent by a server before copying them into memory. A malicious DHCPv6 server on the local network can exploit this flaw by sending a crafted reply, tr…

7.5Hoch

CVE-2026-124739 vor 7 Stunden

Busybox: httpd stack buffer overflow via an "i:" rule in a subdirectory httpd.conf

Red Hat Red Hat Enterprise Linux 6; Red Hat Red Hat Hardened Images

A flaw was found in BusyBox. When the httpd web server processes subdirectory configuration files, an overly long index page name can trigger a stack-based buffer overflow. An attacker with permissions to write to a subdirectory configuration file could explo…

7.5Hoch

CVE-2026-124737 vor 8 Stunden

Busybox: heap buffer overflow in the tftp client on fallback to the default block size

Red Hat Red Hat Enterprise Linux 6; Red Hat Red Hat Hardened Images

A flaw was found in BusyBox. When the TFTP (Trivial File Transfer Protocol) client requests a custom small block size and receives a standard response, it falls back to the default block size without resizing the allocated memory buffer. A malicious TFTP serv…