UBUNTU-CVE-2026-119843: Medium severity ubuntu/gst-plugins-good1.0 vulnerability
A flaw was found in GStreamer's gst-plugins-good package. The FLV media demuxer does not properly validate buffer sizes and data availability when processing enhanced audio and video tags in malformed or truncated FLV streams. A remote attacker could exploit this vulnerability by providing a specially crafted FLV media file that, when opened or streamed by a GStreamer-based application, triggers an assertion failure or a process crash, leading to denial of service.
Affected Software
Event History
Frequently Asked Questions
Who is exposed to this issue?
Applications on Ubuntu that use the GStreamer gst-plugins-good FLV demuxer to open or stream FLV media are exposed when they process malformed or truncated FLV input containing enhanced audio or video tags.
What does an attacker need to do to trigger the vulnerability?
An attacker needs to provide a specially crafted FLV media file and have it opened or streamed by a GStreamer-based application. No attacker privileges are required, but user interaction is required to cause the application to process the file or stream.
What is the practical impact of successful exploitation?
Successful exploitation can trigger an assertion failure or crash in the affected process, causing denial of service. The provided information does not indicate confidentiality or integrity impact.