Severity by source
Network-reachable via crafted media file, user interaction required to open it, no privileges needed, crash-only impact so availability high, no confidentiality or integrity impact.
AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Estimated by vuln.today — no official severity rating has been published for this CVE yet.
Lifecycle Timeline
1DescriptionCVE.org
[gstreamer1-libav: gstreamer1-libav: NULL pointer dereference in gstavdemux.c error handler]
AnalysisAI
NULL pointer dereference in the error handler of gstavdemux.c within gstreamer1-libav can crash the GStreamer pipeline process when it encounters a malformed or crafted media stream during AV demuxing. The flaw resides specifically in error recovery logic - the code path meant to handle failures itself dereferences a NULL pointer, producing a denial-of-service condition in any application relying on this plugin for media playback or processing. No public exploit code or active exploitation has been identified at time of analysis; this appears to be a stability/reliability bug reported through Ubuntu's vendor channel.
Technical ContextAI
gstreamer1-libav is the GStreamer plugin package that wraps the libav (FFmpeg-derived) multimedia library, enabling GStreamer pipelines to decode a wide range of audio and video formats. The affected file gstavdemux.c implements AV demuxing - the process of splitting a multiplexed media container into separate audio and video elementary streams. The bug is a NULL pointer dereference (consistent with CWE-476) located within the error handler code path. When a demuxing operation fails (e.g., due to a malformed input), the error handler is invoked but itself attempts to access a pointer that has not been initialized or has already been freed, triggering a segmentation fault. No CPE data, CWE ID, or CVSS vector was provided in the source intelligence; the characterization of the root cause is inferred from the description and file context.
Affected ProductsAI
The affected component is gstreamer1-libav as reported by the Ubuntu vendor channel. No specific version range, CPE string, or upstream GStreamer version tag was provided in the available intelligence. Ubuntu tracks this under its own package versioning; users should consult the Ubuntu Security Notices (USN) portal for the exact affected package versions and release series. No vendor advisory URL was included in the provided references.
RemediationAI
Apply the updated gstreamer1-libav package distributed through the Ubuntu package repositories once a patched build is released - no exact fix version was confirmed in the available data. Until a patch is available, organizations processing untrusted media should consider restricting the use of GStreamer-based pipelines to trusted input sources only, or substituting an alternative decoding backend where feasible. Disabling or removing the gstreamer1-libav plugin (gst-libav) on systems that do not require FFmpeg-based codec support eliminates exposure with no functional impact to pipelines using only native GStreamer plugins. No advisory URL was included in the provided references; check the Ubuntu Security Notices portal and the upstream GStreamer bug tracker for patch status.
Same technique Denial Of Service
View allVendor StatusVendor
SUSE
Severity: Important| Product | Status |
|---|---|
| SUSE Linux Enterprise Server 16.0 | Affected |
| SUSE Linux Enterprise Server 16.1 | Affected |
| SUSE Linux Enterprise Server for SAP applications 16.0 | Affected |
| SUSE Linux Enterprise Server for SAP applications 16.1 | Affected |
| openSUSE Leap 16.0 | Affected |
Share
External POC / Exploit Code
Leaving vuln.today