Skip to main content

gstreamer1-libav CVE-2026-12893

MEDIUM
2026-07-06 vendor:ubuntu
Share

Severity by source

vuln.today AI
6.5 MEDIUM

Network-reachable via crafted media file, user interaction required to open it, no privileges needed, crash-only impact so availability high, no confidentiality or integrity impact.

3.1 AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
4.0 AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N
SUSE
7.5 HIGH
AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Red Hat
5.5 MEDIUM
qualitative

Estimated by vuln.today — no official severity rating has been published for this CVE yet.

Lifecycle Timeline

1
Analysis Generated
Jul 06, 2026 - 20:22 vuln.today

DescriptionCVE.org

[gstreamer1-libav: gstreamer1-libav: NULL pointer dereference in gstavdemux.c error handler]

AnalysisAI

NULL pointer dereference in the error handler of gstavdemux.c within gstreamer1-libav can crash the GStreamer pipeline process when it encounters a malformed or crafted media stream during AV demuxing. The flaw resides specifically in error recovery logic - the code path meant to handle failures itself dereferences a NULL pointer, producing a denial-of-service condition in any application relying on this plugin for media playback or processing. No public exploit code or active exploitation has been identified at time of analysis; this appears to be a stability/reliability bug reported through Ubuntu's vendor channel.

Technical ContextAI

gstreamer1-libav is the GStreamer plugin package that wraps the libav (FFmpeg-derived) multimedia library, enabling GStreamer pipelines to decode a wide range of audio and video formats. The affected file gstavdemux.c implements AV demuxing - the process of splitting a multiplexed media container into separate audio and video elementary streams. The bug is a NULL pointer dereference (consistent with CWE-476) located within the error handler code path. When a demuxing operation fails (e.g., due to a malformed input), the error handler is invoked but itself attempts to access a pointer that has not been initialized or has already been freed, triggering a segmentation fault. No CPE data, CWE ID, or CVSS vector was provided in the source intelligence; the characterization of the root cause is inferred from the description and file context.

Affected ProductsAI

The affected component is gstreamer1-libav as reported by the Ubuntu vendor channel. No specific version range, CPE string, or upstream GStreamer version tag was provided in the available intelligence. Ubuntu tracks this under its own package versioning; users should consult the Ubuntu Security Notices (USN) portal for the exact affected package versions and release series. No vendor advisory URL was included in the provided references.

RemediationAI

Apply the updated gstreamer1-libav package distributed through the Ubuntu package repositories once a patched build is released - no exact fix version was confirmed in the available data. Until a patch is available, organizations processing untrusted media should consider restricting the use of GStreamer-based pipelines to trusted input sources only, or substituting an alternative decoding backend where feasible. Disabling or removing the gstreamer1-libav plugin (gst-libav) on systems that do not require FFmpeg-based codec support eliminates exposure with no functional impact to pipelines using only native GStreamer plugins. No advisory URL was included in the provided references; check the Ubuntu Security Notices portal and the upstream GStreamer bug tracker for patch status.

Vendor StatusVendor

SUSE

Severity: Important
Product Status
SUSE Linux Enterprise Server 16.0 Affected
SUSE Linux Enterprise Server 16.1 Affected
SUSE Linux Enterprise Server for SAP applications 16.0 Affected
SUSE Linux Enterprise Server for SAP applications 16.1 Affected
openSUSE Leap 16.0 Affected

Share

CVE-2026-12893 vulnerability details – vuln.today

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy