Is CVE-2026-121259 being exploited?

No public exploit is currently tracked.

How severe is CVE-2026-121259?

CVE-2026-121259 has a CVSS v3 severity of MEDIUM (6.5).

Back

CVE-2026-121259

Description

A flaw was found in the GStreamer JPEG 2000 decimator in gst-plugins-bad. Crafted JPEG 2000 media can cause integer overflows or division by zero during tile processing. An application that processes the malicious media may crash, resulting in a denial of service.