UBUNTU-CVE-2026-119842: Medium severity ubuntu/gst-plugins-base1.0 vulnerability
A flaw was found in GStreamer's gst-plugins-base MicroDVD subtitle parser. When processing a specially crafted subtitle file, the parser may dereference a NULL pointer, causing the application to crash when a user opens or plays media with a malformed MicroDVD (.sub) subtitle file.
Affected Software
Event History
Frequently Asked Questions
Who is exposed to this issue?
Applications on Ubuntu that use GStreamer gst-plugins-base1.0 to process MicroDVD subtitle files are exposed when a user opens or plays media accompanied by a malformed .sub subtitle file.
What does an attacker need to do to exploit it?
The attacker needs to provide a specially crafted MicroDVD (.sub) subtitle file and have a user open or play media that causes the affected parser to process it. No attacker privileges are required, but user interaction is required.
What is the expected impact?
Successful exploitation can cause the affected application to crash due to a NULL pointer dereference, resulting in a denial of service. The provided data does not indicate confidentiality or integrity impact.