UBUNTU-CVE-2026-119729: Integer Overflow
A flaw was found in GStreamer. An integer overflow vulnerability in the AV1 LEB128 variable-length integer parser allows a remote attacker to cause a crash in applications that process AV1 media content. By crafting a malformed AV1 bitstream containing an invalid LEB128-encoded value, an attacker can cause integer overflow in the parser, resulting in incorrect length values being used during stream processing, which can lead to a denial of service.
Affected Software
Event History
Frequently Asked Questions
Who is exposed to this issue?
Applications using the affected Ubuntu GStreamer plugin packages that process AV1 media content are exposed. The issue can be triggered remotely through crafted AV1 content.
What does an attacker need to exploit it?
An attacker needs to cause an application to process a malformed AV1 bitstream containing an invalid LEB128-encoded value. The vector indicates no privileges are required, but user interaction is required.
What is the likely impact?
Successful exploitation can crash the application while it processes the crafted stream, resulting in denial of service. The provided data does not indicate confidentiality or integrity impact.