A flaw was found in GStreamer's gst-plugins-good package. The FLV media demuxer does not properly...
0.97github-advisories · v1 · published 11/3/2026, 12:31:47 PM · modified 11/3/2026, 12:31:53 PM · TLP:CLEAR
enterprise.integrationoffsec.exploitoffsec.vulnerability
Source evidence ↗Entities
cwe: CWE-617cve: CVE-2026-119843ghsa: GHSA-j9j5-89xh-84jf
Assessment
Fact summary
low · heuristicA flaw was found in GStreamer's gst-plugins-good package. The FLV media demuxer does not properly validate buffer sizes and data availability when processing enhanced audio and video tags in malformed or truncated FLV streams. A remote attacker could exploit this vulnerability by providing a specially crafted FLV media file that, when opened or streamed by a GStreamer-based application, triggers an assertion failure or a process crash, leading to denial of service.
Technical delta
low · heuristicAutomated delta unavailable (heuristic mode).
Defensive significance
low · heuristicNone identified (heuristic mode).
Extracted text
A flaw was found in GStreamer's gst-plugins-good package. The FLV media demuxer does not properly validate buffer sizes and data availability when processing enhanced audio and video tags in malformed or truncated FLV streams. A remote attacker could exploit this vulnerability by providing a specially crafted FLV media file that, when opened or streamed by a GStreamer-based application, triggers an assertion failure or a process crash, leading to denial of service.