CVE-2026-119842
Description
A flaw was found in GStreamer's gst-plugins-base MicroDVD subtitle parser. When processing a specially crafted subtitle file, the parser may dereference a NULL pointer, causing the application to crash when a user opens or plays media with a malformed MicroDVD (.sub) subtitle file.
Statement
This vulnerability is rated as Moderate severity (RH CVSS 6.5) because exploitation requires user interaction and the impact is limited to denial of service (crash of the media player process). Red Hat Enterprise Linux and RHIVOS streams ship gstreamer1-plugins-base built from upstream gst-plugins-base versions prior to 1.28.2 and are affected. Fedora 43 ships 1.26.x and is affected. Fedora 44 and Fedora Rawhide ship 1.28.8, which includes the upstream fix from gst-plugins-base 1.28.2, and are not affected. No Red Hat product trackers are filed (Moderate with CVSS below 7.0).
Mitigation
Avoid untrusted MicroDVD (.sub) subtitle files; disable automatic subtitle loading if supported.
Common Vulnerability Scoring System (CVSS) Score Details
Info alert:Important note
CVSS scores for open source components depend on vendor-specific factors (e.g. version or build chain). Therefore, Red Hat's score and impact rating can be different from NVD and other vendors. Red Hat remains the authoritative CVE Naming Authority (CNA) source for its products and services (see Red Hat classifications).
The following CVSS metrics and score provided are preliminary and subject to review.
CVSS v3 Score Breakdown
| Red Hat | NVD | cve.org | |
|---|---|---|---|
| Base Score | 6.5 | N/A | 6.5 |
| Attack Vector | Network | N/A | Network |
| Attack Complexity | Low | N/A | Low |
| Privileges Required | None | N/A | None |
| User Interaction | Required | N/A | Required |
| Scope | Unchanged | N/A | Unchanged |
| Confidentiality | None | N/A | None |
| Integrity Impact | None | N/A | None |
| Availability Impact | High | N/A | High |
Vector
Red Hat: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
cve.org: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
Frequently Asked Questions
Not sure what something means? Check out our Security Glossary.
Want to get errata notifications? Sign up here.
