From 13fbd2c37cd4ac93caaa440364ff09fddf620938 Mon Sep 17 00:00:00 2001 From: =?utf8?q?V=C3=ADctor=20Manuel=20J=C3=A1quez=20Leal?= Date: Wed, 11 Feb 2026 22:07:49 +0100 Subject: [PATCH] [PATCH] libs: jpegparser: boundary checks before copying it Gbp-Pq: Name CVE-2026-3082.patch --- gst-libs/gst/codecparsers/gstjpegparser.c | 4 ++++ 1 file changed, 4 insertions(+) diff --git a/gst-libs/gst/codecparsers/gstjpegparser.c b/gst-libs/gst/codecparsers/gstjpegparser.c index 0cb5d0b7..fd66f6cf 100644 --- a/gst-libs/gst/codecparsers/gstjpegparser.c +++ b/gst-libs/gst/codecparsers/gstjpegparser.c @@ -77,6 +77,10 @@ ensure_debug_category (void) #define READ_BYTES(reader, buf, length) G_STMT_START { \ const guint8 *vals; \ + if (length > sizeof (buf)) { \ + GST_WARNING ("data size is bigger than its storage"); \ + goto failed; \ + } \ if (!gst_byte_reader_get_data (reader, length, &vals)) { \ GST_WARNING ("failed to read bytes, size:%d", length); \ goto failed; \ -- 2.30.2