CVE-2026-100229

Awaiting Analysis Awaiting Analysis - Queue

Out-of-Bounds Write in GStreamer H.266 Codec Parser Library

Publication date: 2026-10-14

Last updated on: 2026-10-14

Assigner: redhat-SADP

Description

A flaw was found in GStreamer's H.266 codec parser library (libgstcodecparsers). An out-of-bounds write vulnerability exists in the DCI parsing function, where a reserved field value is incorrectly accepted, causing the parser to write beyond the bounds of an internal structure. An attacker could exploit this by providing a specially crafted H.266 bitstream to a third-party application that uses this library API, potentially causing a crash or memory corruption. No standard GStreamer pipeline element currently invokes the affected code path.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-10-14

Last Modified

2026-10-14

Generated

2026-10-19

AI Q&A

2026-10-15

EPSS Evaluated

2026-10-18

NVD

CVE-2026-100229

EUVD

EUVD-2026-100958

Affected Vendors & Products

Vendor	Product	Version / Range
Red	Hat	Red Hat Enterprise Linux 10 *
Red	Hat	Red Hat Enterprise Linux 7 *
Red	Hat	Red Hat Enterprise Linux 8 *
Red	Hat	Red Hat Enterprise Linux 9 *

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-787	The product writes data past the end, or before the beginning, of the intended buffer.

Attack-Flow Graph

Executive Summary

This is an out-of-bounds write vulnerability in GStreamer's H.266 codec parser library (libgstcodecparsers). It occurs in the DCI parsing function where a reserved field value is incorrectly accepted, causing the parser to write beyond the bounds of an internal structure. An attacker could exploit this by providing a specially crafted H.266 bitstream to a third-party application using this library API, potentially causing a crash or memory corruption.

Detection Guidance

Detecting this vulnerability requires checking if your system uses GStreamer 1.26 or later with H.266 support. Inspect installed packages for GStreamer components and verify if any third-party applications use the gst_h266_parser_parse_dci() API. Use commands like 'rpm -qa | grep gstreamer' or 'apt list --installed | grep gstreamer' to check for GStreamer installations.

Impact Analysis

Exploitation could lead to crashes or memory corruption in applications using the vulnerable library. Since no standard GStreamer pipeline element uses the affected code path, impact depends on third-party applications calling the specific API with attacker-controlled data. The vulnerability requires user interaction to provide malicious H.266 data.

Compliance Impact

This vulnerability does not directly affect compliance with GDPR, HIPAA, or similar standards. It is a low-severity out-of-bounds write issue in a specific codec parser library that requires third-party application interaction to exploit. No standard usage paths are affected, and no evidence suggests it impacts data protection or privacy controls required by these regulations.

Mitigation Strategies

Since no standard mitigation is available, avoid processing untrusted H.266 bitstreams in applications using GStreamer's H.266 parser. Update to a patched version once released. For RHEL 7, 8, or 9, no action is needed as they lack H.266 support. Monitor vendor advisories for updates.

Hi! I’m here to help you understand CVE-2026-100229. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70