Signal is active with 2 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
A flaw was found in GStreamer's gst-plugins-good. A heap-based out-of-bounds read of 4 bytes can occur when parsing FLAC audio stream headers embedded in a Matroska or WebM container file. The vulnerability is triggered by a boundary check that does not account for the full size of the data being copied, allowing a small read past the end of the allocated buffer. An attacker could exploit this by crafting a malicious Matroska or WebM file and tricking a user into opening it, potentially leaking a small amount of adjacent heap memory.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
AVAILABLE
Momentum
NONE
CVE-2026-17072 in Red Hat Enterprise Linux 10 allows out-of-bounds read when parsing FLAC headers in Matroska/WebM files. CVSS 3․3, patch available. https://ift.tt/MhSA9fR
Post summary
CVE‑2026‑17072 is an out‑of‑bounds read flaw in RHEL10 that has a patch released; no PoC, exploit, or active exploitation is reported.
CVE-2026-17072 Heap-Based Out-of-Bounds Read in GStreamer gst-plugins-good FLAC Parser https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-17072
Post summary
The text briefly lists CVE-2026-17072, its type, and a link, but offers no information on exploits, patches, or active usage.