CVE-2026-52719
Gravedad CVSS v3.1:
ALTA
Tipo:
CWE-125
Lectura fuera de límites
Fecha de publicación:
15/06/2026
Última modificación:
28/07/2026
Descripción
*** Pendiente de traducción *** An out-of-bounds read vulnerability was found in the VA JPEG decoder in GStreamer's gst-plugins-bad. The JPEG parser reads a segment length value from the bitstream without validating it against available data. A remote attacker could trick a user into opening a specially crafted JPEG file, causing downstream parsing to read beyond the provided input buffer, leading to a crash or potential information disclosure.
Impacto
Puntuación base 3.x
7.10
Gravedad 3.x
ALTA
Referencias a soluciones, herramientas e información
- https://access.redhat.com/errata/RHSA-2026:36749
- https://access.redhat.com/errata/RHSA-2026:36834
- https://access.redhat.com/errata/RHSA-2026:47070
- https://access.redhat.com/errata/RHSA-2026:47071
- https://access.redhat.com/security/cve/CVE-2026-52719
- https://bugzilla.redhat.com/show_bug.cgi?id=2486353
- https://gitlab.freedesktop.org/gstreamer/gstreamer/-/work_items/5104
- https://access.redhat.com/errata/RHSA-2026:36749
- https://access.redhat.com/errata/RHSA-2026:36834
- https://access.redhat.com/security/cve/CVE-2026-52719
- https://bugzilla.redhat.com/show_bug.cgi?id=2486353
- https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-52719.json