CVE-2026-125706
MEDIUM
NVD
CVSS Score
5.5
Severity
MEDIUM
Published
Nov 10, 2026
Vendor
unknown
Description
A flaw was found in GStreamer's gst-plugins-bad MPEG Program Stream demuxer and resindvd DVD-playback plugin. The PES header parsers do not adequately check remaining data before reading timestamps and optional header fields. Opening a specially crafted MPEG Program Stream file can cause an out-of-bounds read and potentially crash the application, resulting in a denial of service.