CVE-2025-3887

A flaw was found in GStreamer H265 Codec Parsing (gstreamer1-plugins-bad-free). This vulnerability allows remote attackers to execute arbitrary code by parsing H265 slice headers.

Red Hat has stack protection mechanisms in place, such as FORTIFY_SOURCE, Position Independent Executables, or Stack Smashing Protection. Furthermore, caution is advised against unknown or random sources of data.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.

Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.