Medium 6.5

A flaw was found in GStreamer's gst-plugins-base MicroDVD subtitle parser. When processing a...

CVE-2026-119842 First seen on SecPulse Oct 31, 03:51

Affected packages

Ecosystem	Package	Affected → Fixed	Fixed
Red Hat	Red HatRed Hat Enterprise Linux 10	—	Not listed
Red Hat	Red HatRed Hat Enterprise Linux 6	—	Not listed
Red Hat	Red HatRed Hat Enterprise Linux 7	—	Not listed
Red Hat	Red HatRed Hat Enterprise Linux 8	—	Not listed
Red Hat	Red HatRed Hat Enterprise Linux 9	—	Not listed
GStreamer project	GStreamer projectgst-plugins-base	< 1.28.2→ 1.28.2	1.28.2

Fix status by distribution

Records published by each distribution for this CVE. Fixed versions differ by release; check each link.

Debian DEBIAN-CVE-2026-119842 gst-plugins-base1.0 Fix available
Ubuntu UBUNTU-CVE-2026-119842 gst-plugins-base1.0 No fixed version in this record

Original description The description as published by the source.

A flaw was found in GStreamer's gst-plugins-base MicroDVD subtitle parser. When processing a specially crafted subtitle file, the parser may dereference a NULL pointer, causing the application to crash when a user opens or plays media with a malformed MicroDVD (.sub) subtitle file.

Source: CVE.org (CVE Program・cvelistV5) NVD GitHub Advisory

References

Key facts

CVSS v3: Medium 6.5; CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
Published: Oct 31, 2026
First seen on SecPulse: Oct 31, 03:51
GHSA: GHSA-c6jr-3xqv-fchj
CWE: CWE-476

NVD GitHub Advisory

Tags(click for explanation)

CWE

CWE-476

Vendors

Red Hat

All

Red Hat Enterprise Linux 10 Red Hat Enterprise Linux 6 Red Hat Enterprise Linux 7 Red Hat Enterprise Linux 8 Red Hat Enterprise Linux 9 Gstreamer Project Gst Plugins Base

Detection sources

NIST National Vulnerability DatabaseNov 6, 02:17
GitHub Security Advisories (Global)Oct 31, 06:32
CVE.org (CVE Program・cvelistV5)Nov 6, 02:05