Live › vulnerability › CVE-2026-119842
GStreamer's gst-plugins-base MicroDVD subtitle parser can dereference a NULL pointer when it reads a crafted .sub file. The result is a crash of the application that opens or plays the media.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-30 19:25 UTC. All times on this page are UTC.
Applications that use GStreamer to decode or play media and accept user-supplied MicroDVD (.sub) subtitle files are exposed to a crash. Systems that never parse subtitle files, or that only play trusted media, are unlikely to be reached. The sources do not describe a data-exfiltration path.
No product ranges from the sources yet.
Unknown from the sources.
No fix yet, per the sources.
Each row is the first time that source carried this signal. The analyst’s rows are its own findings.
A flaw was found in GStreamer's gst-plugins-base MicroDVD subtitle parser. When processing a specially crafted subtitle file, the parser may dereference a NULL pointer, causing the application to crash when a user opens or plays media with a malformed MicroDVD (.sub) subtitle file.
This page as .md · .json · in your agent: get_signal("CVE-2026-119842")
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.