CVE WATCH / VULNERABILITY DETAIL
CVE-2026-125706
MEDIUMCVSS 5.5NVD feed
Published 10 November 2026 · tracked since 11 November 2026
Description
A flaw was found in GStreamer's gst-plugins-bad MPEG Program Stream demuxer and resindvd DVD-playback plugin. The PES header parsers do not adequately check remaining data before reading timestamps and optional header fields. Opening a specially crafted MPEG Program Stream file can cause an out-of-b
References
- NVD — National Vulnerability Database
- CVE.org record (MITRE)
- CISA Known Exploited Vulnerabilities catalog
Latest tracked vulnerabilities
- CVE-2026-124937
- CVE-2026-124911
- CVE-2026-125745 MEDIUM 4.3
- CVE-2026-12573 HIGH 8.8
- CVE-2026-12572 HIGH 7.2
- CVE-2026-125715 MEDIUM 5.3
- CVE-2026-125712 HIGH 7.5
- CVE-2026-120326
- CVE-2026-95646 HIGH 8
- CVE-2026-125704 HIGH 7.5