REDHAT-BUG-2564182: Medium severity vulnerability

Published Oct 30, 2026

Updated

gst-plugins-good FLV demuxer (gst/flv/gstflvdemux.c): missing GstByteReader return checks in gstflvdemuxparsetagaudio/video before 1.28.2 when parsing Enhanced RTMP v2 tags; malformed FLV can crash the process (DoS). Fixed in gst-plugins-good 1.28.2 (MR !11244). Upstream GStreamer-SA-2026-0020 (2026-04-07). CVE CVE-2026-119843.

Affected Software

0 affected components

Event History

Oct 30, 2026

Data Sourced

via Red Hat·04:54 PM

DescriptionSeverityAffected Software

Frequently Asked Questions

What must an attacker provide to trigger the issue?

The attacker needs to cause the affected process to parse a malformed FLV containing Enhanced RTMP v2 audio or video tags.

What is the remediation version?

Update gst-plugins-good to version 1.28.2 or later. The fix adds missing GstByteReader return checks in the FLV demuxer tag parsing paths.

REDHAT-BUG-2564182: Medium severity vulnerability

Affected Software

Event History

Frequently Asked Questions

What must an attacker provide to trigger the issue?

What is the remediation version?

Company

Resources

Contact

Frequently Asked Questions

What must an attacker provide to trigger the issue?

What is the remediation version?