{"schemaVersion":3,"id":"SUSE-SU-2026:22817-1","aliases":[],"status":"published","duplicateOf":null,"title":null,"description":"Security update for gstreamer-plugins-bad\n\nThis update for gstreamer-plugins-bad fixes the following issues\n\n- CVE-2026-12891: unchecked aspect_ratio_idc value used as an array index in the H.266 parser could cause a global out-\n  of-bounds read (bsc#1268872).\n- CVE-2026-12892: 1-byte heap out-of-bounds read in H.264 NAL extension slice parser (bsc#1268971).\n- CVE-2026-14935: webrtcbin accepts remote SDP without a=fingerprint due to inverted presence check (bsc#1271051).\n- CVE-2026-52720: invalid check of total area instead of individual dimensions could trigger a heap out-of-bounds write\n  (bsc#1268406).\n- CVE-2026-52721: crafted PCAP records during IPv4 or TCP header parsing could cause an out-of-bounds read\n  (bsc#1268408).\n- CVE-2026-52722: crafted VMnc stream with large cursor dimensions can overflow signed integer (bsc#1268410).\n- CVE-2026-53701: multi-slice-in-tile partitions without slice index bounds checks could trigger an out-of-bounds write\n  (bsc#1268172).\n- CVE-2026-53702: incorrect loop bound during H.265 SEI message parsing could result in a stack buffer overflow\n  (bsc#1268168).\n- CVE-2026-59692: unvalidated peer certificate Subject DN printed during a DTLS handshake could cause a stack buffer\n  overflow (bsc#1271168).","dates":{"published":"2026-07-18T06:19:25.000Z","modified":"2026-07-28T18:24:07.725Z","reserved":null,"kevAdded":[],"kevDue":[]},"cvss":{"headline":{"score":null,"severity":"unknown","version":null,"versionLabel":null,"source":null,"vector":null,"computed":false,"selection":"none"},"metrics":[]},"epss":{"probability":null,"percentile":null,"severity":"unknown","asOf":null,"change":{"pp":null,"baselineDate":null,"baselineScore":null},"history":[],"last30":[]},"kev":{"state":"not-listed","entries":[],"listedCount":0,"totalCatalogs":3,"catalogs":[{"source":"cisa","label":"CISA","listed":false,"entry":null},{"source":"enisa","label":"ENISA","listed":false,"entry":null},{"source":"circl","label":"CIRCL","listed":false,"entry":null}]},"ransomware":{"state":"none-recorded","sources":[]},"exploits":[],"exploitCount":0,"weaknesses":[],"affected":[{"vendor":"suse","product":"gstreamer-plugins-bad&distro=SUSE Linux Enterprise Server 16.0","name":"gstreamer-plugins-bad","label":"gstreamer-plugins-bad&distro=SUSE Linux Enterprise Server 16.0","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/gstreamer-plugins-bad&distro=SUSE Linux Enterprise Server 16.0","purlType":"rpm","versions":[{"text":"< 1.26.7-160000.3.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 1.26.7-160000.3.1","eol":null,"hubHref":null},{"vendor":"suse","product":"gstreamer-plugins-bad&distro=SUSE Linux Enterprise Server for SAP applications 16.0","name":"gstreamer-plugins-bad","label":"gstreamer-plugins-bad&distro=SUSE Linux Enterprise Server for SAP applications 16.0","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/gstreamer-plugins-bad&distro=SUSE Linux Enterprise Server for SAP applications 16.0","purlType":"rpm","versions":[{"text":"< 1.26.7-160000.3.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 1.26.7-160000.3.1","eol":null,"hubHref":null}],"affectedCount":2,"eol":{"hasEol":false,"count":0},"references":[{"url":"https://www.suse.com/support/update/announcement/2026/suse-su-202622817-1/","label":"www.suse.com/support/update/announcement/2026/suse-su-202622817-1/","hostname":"www.suse.com","tags":["Advisory"]},{"url":"https://bugzilla.suse.com/1268168","label":"bugzilla.suse.com/1268168","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1268172","label":"bugzilla.suse.com/1268172","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1268406","label":"bugzilla.suse.com/1268406","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1268408","label":"bugzilla.suse.com/1268408","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1268410","label":"bugzilla.suse.com/1268410","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1268872","label":"bugzilla.suse.com/1268872","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1268971","label":"bugzilla.suse.com/1268971","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1271051","label":"bugzilla.suse.com/1271051","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1271168","label":"bugzilla.suse.com/1271168","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://www.suse.com/security/cve/CVE-2026-12891","label":"www.suse.com/security/cve/CVE-2026-12891","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2026-12892","label":"www.suse.com/security/cve/CVE-2026-12892","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2026-14935","label":"www.suse.com/security/cve/CVE-2026-14935","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2026-52720","label":"www.suse.com/security/cve/CVE-2026-52720","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2026-52721","label":"www.suse.com/security/cve/CVE-2026-52721","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2026-52722","label":"www.suse.com/security/cve/CVE-2026-52722","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2026-53701","label":"www.suse.com/security/cve/CVE-2026-53701","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2026-53702","label":"www.suse.com/security/cve/CVE-2026-53702","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2026-59692","label":"www.suse.com/security/cve/CVE-2026-59692","hostname":"www.suse.com","tags":["WEB"]}],"lineage":{"upstream":["CVE-2026-12891","CVE-2026-12892","CVE-2026-14935","CVE-2026-52720","CVE-2026-52721","CVE-2026-52722","CVE-2026-53701","CVE-2026-53702","CVE-2026-59692"],"downstream":[],"duplicates":[],"related":["CVE-2026-12891","CVE-2026-12892","CVE-2026-14935","CVE-2026-52720","CVE-2026-52721","CVE-2026-52722","CVE-2026-53701","CVE-2026-53702","CVE-2026-59692"]},"timeline":[{"kind":"published","date":"2026-07-18T06:19:25.000Z","label":"Published","detail":"Vulnerability first disclosed.","source":null},{"kind":"modified","date":"2026-07-28T18:24:07.725Z","label":"Last modified","detail":"Vulnerability information updated.","source":null}],"risk":{"score":0,"level":"minimal","profile":"Default","thresholds":{"critical":75,"high":50,"medium":25,"low":10}},"meta":{"dataAsOf":"2026-10-22T06:57:39.139Z","stale":false,"partial":false}}