CVE-2026-121259

Description

A flaw was found in the GStreamer JPEG 2000 decimator in gst-plugins-bad. Crafted JPEG 2000 media can cause integer overflows or division by zero during tile processing. An application that processes the malicious media may crash, resulting in a denial of service.

References

https://gstreamer.freedesktop.org/security/sa-2026-0015.html

https://gstreamer.freedesktop.org/releases/1.28/

https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-116067

https://bugzilla.redhat.com/show_bug.cgi?id=2565686

https://access.redhat.com/security/cve/CVE-2026-121259

Details

Source: Mitre, NVD

Risk Information

CVSS v2

CVSS v3

EPSS