CVE-2026-112214— Gstreamer1-plugins-ugly-free: gstreamer1-plugins-ugly-free: unbounded memory allocation in asfdemux simple index parser
Quick assessment
Affected
Red Hat Red Hat Enterprise Linux 10
Exploitation
No confirmed in-the-wild exploitation; assess based on exposure
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.
在 中的 GStreamer ASF 解复用器发现了一个漏洞。在解析 Simple Index 对象时，攻击者可控制的条目计数被用于确定堆内存分配的大小，且未受到对象中可用载荷的限制。处理经过篡改的 ASF、WMV 或 WMA 文件时，可能触发极大的内存分配请求；若分配失败或进程受限于内存资源，将导致拒绝服务（DoS）。
Possible ATT&CK Techniques 1 AI
T1499.003 · Application Exhaustion FloodAffected Version Matrix 4
| Vendor | Product | Version Range | Status |
|---|---|---|---|
| Red Hat | Red Hat Enterprise Linux 10 | any |
affected |
| Red Hat | Red Hat Enterprise Linux 7 | any |
unaffected |
| Red Hat | Red Hat Enterprise Linux 8 | any |
unaffected |
| Red Hat | Red Hat Enterprise Linux 9 | any |
affected |
Get alerts for future matching vulnerabilities
Log in to subscribe
I. Basic Information for CVE-2026-112214
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
Gstreamer1-plugins-ugly-free: gstreamer1-plugins-ugly-free: unbounded memory allocation in asfdemux simple index parser
Source: CVE Program / CVE List V5
Vulnerability Description
A flaw was found in the GStreamer ASF demuxer in gst-plugins-ugly. When parsing a Simple Index object, an attacker-controlled entry count is used to size a heap allocation without being limited to the payload available in the object. Processing a crafted ASF, WMV, or WMA file can cause a very large memory allocation request and lead to denial of service if the allocation fails or the process is memory-constrained.
Source: CVE Program / CVE List V5
CVSS Information
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
Source: CVE Program / CVE List V5
Vulnerability Type
未经控制的内存分配
Source: CVE Program / CVE List V5
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| Red Hat | Red Hat Enterprise Linux 10 | - |
cpe:/o:redhat:enterprise_linux:10
|
|
| Red Hat | Red Hat Enterprise Linux 7 | - |
cpe:/o:redhat:enterprise_linux:7
|
|
| Red Hat | Red Hat Enterprise Linux 8 | - |
cpe:/o:redhat:enterprise_linux:8
|
|
| Red Hat | Red Hat Enterprise Linux 9 | - |
cpe:/o:redhat:enterprise_linux:9
|
|
II. Public POCs for CVE-2026-112214
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POC
Premium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2026-112214
请登录查看更多情报信息。
Vendor Advisories for CVE-2026-112214 (2)
Same Patch Batch · Red Hat · 2026-10-19 · 10 CVEs total
| CVE-2026-16487 | 8.1 HIGH | Bootc: containers-common: bootc: automatic updates can apply unsigned mutable-tag content |
| CVE-2026-112261 | 7.8 HIGH | Gimp: gimp: use-after-free in xcf loader via prop_selected_path |
| CVE-2026-112258 | 7.8 HIGH | Gimp: gimp: use-after-free in xcf loader via prop_linked and prop_selection on channels |
| CVE-2026-112257 | 7.8 HIGH | Gimp: gimp: heap out-of-bounds read/write in psd thumbnail loader (load_resource_1033) |
| CVE-2026-103314 | 7.4 HIGH | Stackrox: stackrox: saml response replay allows multiple central authentication tokens |
| CVE-2026-16460 | 7.4 HIGH | Bootc: ostree: bootc/ostree: staged deployments not revalidated against container signatur |
| CVE-2026-112260 | 7.1 HIGH | Gimp: gimp: heap out-of-bounds read in xcf text-layer parasite parsing |
| CVE-2026-112210 | 6.0 MEDIUM | Rhc: rhc: local privilege escalation via symlink following in rhc-canonical-facts.service |
| CVE-2026-112259 | 5.5 MEDIUM | Gimp: gimp: null pointer dereference in swatchbooker (sbz) palette import |
IV. Related Vulnerabilities
Same product: Red Hat Enterprise Linux 10
-
CVE-2026-112261
Gimp: gimp: use-after-free in xcf loader via prop_selected_p -
CVE-2026-112258
Gimp: gimp: use-after-free in xcf loader via prop_linked and -
CVE-2026-112257
Gimp: gimp: heap out-of-bounds read/write in psd thumbnail l -
CVE-2026-112260
Gimp: gimp: heap out-of-bounds read in xcf text-layer parasi -
CVE-2026-112259
Gimp: gimp: null pointer dereference in swatchbooker (sbz) p
Same vendor: Red Hat
-
CVE-2026-112261
Gimp: gimp: use-after-free in xcf loader via prop_selected_p -
CVE-2026-112258
Gimp: gimp: use-after-free in xcf loader via prop_linked and -
CVE-2026-112257
Gimp: gimp: heap out-of-bounds read/write in psd thumbnail l -
CVE-2026-112260
Gimp: gimp: heap out-of-bounds read in xcf text-layer parasi -
CVE-2026-112259
Gimp: gimp: null pointer dereference in swatchbooker (sbz) p
Same weakness: CWE-789
-
CVE-2026-112399
Pillow: APNG background disposal allocates full canvas befor -
CVE-2026-112283
libbluray through 1.5.1 Uncontrolled Memory Allocation via _ -
CVE-2026-112048
libspatialite through 5.1.0 Uncontrolled Memory Allocation v -
CVE-2026-111279
Dragonfly through 2.0.2 Unbounded Memory Allocation via Nega -
CVE-2026-110258
OW2 ASM 3.0 before 9.11 Excessive Memory Allocation via Mult
V. Comments for CVE-2026-112214
No comments yet