GStreamer streaming media framework "bad" plugins
Backport upstream commit fe5f81163e4f from the GStreamer 1.26
stable branch to fix a bytes/bits confusion in the AV1 parser.
The tile_data_size_minus_1 value (in bytes) was being passed
directly to gst_bit_reader_skip() which expects bits, causing
an assertion failure. The fix multiplies the value by 8 to
convert bytes to bits.
CVE: CVE-2026-52718
Upstream patches:
-
|
||
|---|---|---|
| .gitignore | ||
| 0001-dvbsuboverlay-Mark-parsed-byte-array-as-const.patch | ||
| 0002-dvbsuboverlay-Add-missing-bounds-checks-to-the-parse.patch | ||
| 0003-dvbsuboverlay-Avoid-integer-overflows-and-unreasonab.patch | ||
| 0004-libs-jpegparser-boundary-checks-before-copying-it.patch | ||
| 0005-av1parser-Fix-bytes-bits-confusion-when-parsing-tile.patch | ||
| 0005-dtlsconnection-Allocate-large-enough-buffer-for-the-.patch | ||
| gating.yaml | ||
| gstreamer1-plugins-bad-free-1.26.7-CVE-2026-52719.patch | ||
| gstreamer1-plugins-bad-free-1.26.7-CVE-2026-52720.patch | ||
| gstreamer1-plugins-bad-free-1.26.7-CVE-2026-52722.patch | ||
| gstreamer1-plugins-bad-free-1.26.7-CVE-2026-59691.patch | ||
| gstreamer1-plugins-bad-free.spec | ||
| openh264-add-license-file.patch | ||
| sources | ||