CVE-2026-119842

MediumCVSS 6.5

Published: 30/10/2026(UTC)Updated: 30/10/2026(UTC)Translated: 30/10/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.33%

26th percentile - higher than 26% of all known CVEs

Summary

GStreamer's gst-plugins-base MicroDVD subtitle parser contains a NULL pointer dereference flaw. When processing a specially crafted subtitle file, the parser may dereference a NULL pointer, causing the application to crash when a user opens or plays media with a malformed MicroDVD (.sub) subtitle file.

Risk Assessment

An attacker can supply a malicious subtitle file that crashes the media playback application, leading to a denial of service.

Recommendation

Update GStreamer (gst-plugins-base) to a version containing the fix. Until then, avoid opening untrusted MicroDVD subtitle files.

Other vulnerabilities in GStreamer gst-plugins-base

CVE-2017-5839High
The gst_riff_create_audio_caps function in gst-plugins-base in GStreamer before version 1.10.3 does not properly limit recursion, allowing remote attackers to cause a denial of service (stack overflow and crash) via nested WAVEFORMATEX.

Original NVD description (English source)

A flaw was found in GStreamer's gst-plugins-base MicroDVD subtitle parser. When processing a specially crafted subtitle file, the parser may dereference a NULL pointer, causing the application to crash when a user opens or plays media with a malformed MicroDVD (.sub) subtitle file.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS