CVE WATCH / VULNERABILITY DETAIL
CVE-2026-125041
MEDIUMCVSS 5.5NVD feed
Published 9 November 2026 · tracked since 10 November 2026
Description
A flaw was found in GStreamer's gst-plugins-good MOV/MP4 demuxer. When processing an uncompressed video track, qtdemux fails to validate the declared row alignment and chroma geometry before using them to build a video buffer layout. A crafted file can cause an out-of-bounds heap read while the samp
References
- NVD — National Vulnerability Database
- CVE.org record (MITRE)
- CISA Known Exploited Vulnerabilities catalog
Latest tracked vulnerabilities
- CVE-2026-125198 LOW 2.5
- CVE-2026-125040 MEDIUM 6.5
- CVE-2026-121769 HIGH 8.5
- CVE-2026-60117 MEDIUM 6.2
- CVE-2026-123796
- CVE-2026-123373
- CVE-2026-123372
- CVE-2026-123371
- CVE-2026-123370
- CVE-2026-123369