{"affected":[],"cveId":"CVE-2026-100229","cwes":[],"description":"No standard GStreamer pipeline element invokes the vulnerable parser API. Exploitation would require a third-party application to call it with attacker-controlled H.266 DCI data.","epss":{"date":"2026-11-12","percentile":0.22515,"score":0.00296},"exploits":[],"kev":null,"metrics":[],"modifiedAt":1794492153097,"publishedAt":1791972132688,"references":[{"source":"secalert@redhat.com","tags":[],"url":"https://access.redhat.com/security/cve/CVE-2026-100229"},{"source":"secalert@redhat.com","tags":[],"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2541471"}],"remediation":[],"revision":"52f321e97230cfa8082fd61558f4e7ac84c4a9a4415d08baccdaecabbe6646a9","sources":[{"modifiedAt":1794492153097,"name":"CNA: redhat","retrievedAt":1794496098785,"url":"https://www.cve.org/CVERecord?id=CVE-2026-100229"},{"modifiedAt":1793989052057,"name":"NVD","retrievedAt":1794010706514,"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-100229"},{"modifiedAt":null,"name":"FIRST EPSS","retrievedAt":1794496165514,"url":"https://api.first.org/data/v1/epss?cve=CVE-2026-100229"}],"ssvc":{"assessedAt":1791987102472,"automatable":"yes","exploitation":"none","source":"NVD SSVC: 134c704f-9b21-4f2e-91b3-4a467353bcc0","technicalImpact":"partial"},"status":"rejected","title":"CVE-2026-100229","updatedAt":1794496165514}