CVE-2026-17072 Information disclosure in Red Hat Enterprise Linux 10
An attacker can leak heap memory by tricking a user into opening a malicious Matroska or WebM file containing crafted FLAC data.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Local or same network only
- Victim action needed
- A user has to click or open something
- Fix
- Available
What is CVE-2026-17072?
CVE-2026-17072 is a low-severity vulnerability in Red Hat Enterprise Linux 10, published on 28 Jul 2026. It can only be exploited from the same machine or local network, and only if a user opens a file or follows a link.
Official description
A flaw was found in GStreamer's gst-plugins-good. A heap-based out-of-bounds read of 4 bytes can occur when parsing FLAC audio stream headers embedded in a Matroska or WebM container file. The vulnerability is triggered by a boundary check that does not account for the full size of the data being copied, allowing a small read past the end of the allocated buffer. An attacker could exploit this by crafting a malicious Matroska or WebM file and tricking a user into opening it, potentially leaking a small amount of adjacent heap memory.
Weakness: CWE-125
Which versions are affected by CVE-2026-17072?
How do I fix CVE-2026-17072?
Apply the vendor's patch.
Is CVE-2026-17072 being exploited?
There is no known exploitation of CVE-2026-17072 in the wild and no public exploit code.
Sources
Also known as DEBIAN-CVE-2026-17072, ECHO-8e1b-b2a9-c26d, GHSA-vx44-4wrp-9hjf, UBUNTU-CVE-2026-17072.