CVE-2026-3084

Public on 2026-03-13
Modified on 2026-03-13
Description
An out-of-bound write in the H.266 video bitstream parser when parsing picture partitions can cause crashes for certain input files, and could possibly also allow code execution through heap manipulation.
Severity
Important severity
Important
See what this means
CVSS v3 Base Score
7.8
See breakdown

Affected Packages

Platform Package Release Date Advisory Status
Amazon Linux 2 - Core gstreamer1-plugins-bad-free Not Affected
Amazon Linux 2023 gstreamer1-plugins-bad-free Not Affected

CVSS Scores

Score Type Score Vector
Amazon Linux CVSSv3 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H