CVE-2026-119843— Gst-plugins-good: assertion failures in FLV demuxer when parsing malformed enhanced audio/video tags

Quick assessment

Affected

Red Hat Red Hat Enterprise Linux 10

Exploitation

No confirmed in-the-wild exploitation; assess based on exposure

Recommended action

Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.

在 GStreamer 的 gst-plugins-good 软件包中发现了一个安全漏洞。其 FLV 媒体解复用器在处理畸形或被截断的 FLV 流中的增强型音频和视频标签时，未能正确验证缓冲区大小及数据可用性。远程攻击者可利用此漏洞，通过提供特制的 FLV 媒体文件，诱使基于 GStreamer 的应用程序在打开或流式播放该文件时触发断言失败或导致进程崩溃，从而引发拒绝服务（DoS）攻击。

CVSS 6.5 · Medium Updated Nov 03, 2026

Possible ATT&CK Techniques 2 AI

T1083 · File and Directory Discovery T1190 · Exploit Public-Facing Application

Get alerts for future matching vulnerabilities Log in to subscribe

Vulnerability Information

Have questions about the vulnerability? See if Shenlong's analysis helps!

View Shenlong Deep Dive ↗

Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.

Vulnerability Title

Gst-plugins-good: assertion failures in FLV demuxer when parsing malformed enhanced audio/video tags

Source: CVE Program / CVE List V5

Vulnerability Description

A flaw was found in GStreamer's gst-plugins-good package. The FLV media demuxer does not properly validate buffer sizes and data availability when processing enhanced audio and video tags in malformed or truncated FLV streams. A remote attacker could exploit this vulnerability by providing a specially crafted FLV media file that, when opened or streamed by a GStreamer-based application, triggers an assertion failure or a process crash, leading to denial of service.

Source: CVE Program / CVE List V5

CVSS Information

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

Source: CVE Program / CVE List V5

Vulnerability Type

可达断言

Source: CVE Program / CVE List V5

Affected Products

Vendor	Product	Affected Versions	CPE
Red Hat	Red Hat Enterprise Linux 10	-	`cpe:/o:redhat:enterprise_linux:10`
Red Hat	Red Hat Enterprise Linux 7	-	`cpe:/o:redhat:enterprise_linux:7`
Red Hat	Red Hat Enterprise Linux 8	-	`cpe:/o:redhat:enterprise_linux:8`
Red Hat	Red Hat Enterprise Linux 9	-	`cpe:/o:redhat:enterprise_linux:9`
GStreamer project	gst-plugins-good	0 ~ 1.28.2	-

II. Public POCs for CVE-2026-119843

#	POC Description	Source Link	Shenlong Link

AI-Generated POC Premium

No public POC found.

III. Intelligence Information for CVE-2026-119843

请登录查看更多情报信息。

Other References for CVE-2026-119843 (4)

https://access.redhat.com/security/cve/CVE-2026-119843 vdb-entry x_refsource_REDHAT
https://gitlab.freedesktop.org/gstreamer/gstreamer/-/merge_requests/11244.patch
https://gstreamer.freedesktop.org/security/sa-2026-0020.html
https://bugzilla.redhat.com/show_bug.cgi?id=2564182 issue-tracking x_refsource_REDHAT

https://www.cve.org/CVERecord?id=CVE-2026-119843

Same Patch Batch · Red Hat · 2026-11-03 · 5 CVEs total

CVE-2026-120830	7.4 HIGH	Libslirp: libslirp: out-of-bounds heap read in icmp_forward_error() leading to information
CVE-2026-121259	6.5 MEDIUM	Gst-plugins-bad: gst-plugins-bad: integer overflows and division by zero in jpeg 2000 deci
CVE-2026-120831	6.5 MEDIUM	Libslirp: libslirp: queue pointer corruption in if_output() leading to denial of service
CVE-2026-120971	5.3 MEDIUM	Org.jboss.resteasy/resteasy-core: resteasy: information disclosure through default excepti

IV. Related Vulnerabilities

Same product: Red Hat Enterprise Linux 10

Same vendor: Red Hat

Same weakness: CWE-617