EUVD-2026-115733
GHSA-j9j5-89xh-84jf
Vulnerability Assessment
| Weakness |
CWE
ASVS 5.0
V16 - Security Logging and Error Handling Reachable assertion handling
|
| Impact | This is a moderate-severity denial-of-service issue (CVSS 6.5, A:H only, with C:N/I:N), not a top-tier emergency. The CVSS vector (AV:N/AC:L/PR:N/UI:R/S:U) indicates a network-reachable, low-complexity, unauthenticated flaw, but the UI:R requirement means a victim must open or stream the malicious FLV, which meaningfully reduces real-world exploitability versus a fully remote server-side bug. CWE-617 (reachable assertion) and the description both point to a crash/abort, not memory-corruption-to-code-execution, so impact is confined to availability. No CISA KEV listing is present in the input (not actively exploited per available data), and no EPSS score was provided, so widespread automated exploitation cannot be inferred. No public exploit reference is present - only vendor advisories and the upstream fix patch. The vuln.today decision label is 'this_month,' consistent with a real but non-urgent patch priority rather than act_now/emergency. Net: a legitimate issue to schedule for patching, but the user-interaction gate and DoS-only impact keep it below critical-priority. |
Get an e-mail when this CVE is exploited, patched or re-scored. Free account.
Alert meAnalysisAIv1 – Nov 03, 2026
GStreamer's gst-plugins-good FLV demuxer can be driven into an assertion failure or process crash by malformed or truncated FLV streams carrying enhanced audio/video tags, producing a denial of service in applications that open or stream the file. The assessed CVSS score is 6.5 with availability-only impact and UI:R, and affected deployments include gst-plugins-good plus Red Hat Enterprise Linux 7, 8, 9, and 10. No CISA KEV entry or public exploit code was identified in the supplied data, and the vuln.today priority label is this_month.
RemediationAI
Apply the upstream fix referenced by GStreamer security advisory SA-2026-0020 and GitLab merge request 11244.patch; patch status is upstream fix available (PR/commit), with a released patched version not independently confirmed in the supplied data. For Red Hat Enterprise Linux 7, 8, 9, and 10, use the updated gst-plugins-good packages published through Red Hat's advisory at https://access.redhat.com/security/cve/CVE-2026-119843 and track Bugzilla 2564182 for errata details. No vendor-specific workaround is stated in the supplied data, so exposure should be reduced by relying on the patched packages rather than untrusted FLV processing.
Affected VersionsENISA
Affected Packages
Source: OSV (Open Source Vulnerabilities)
Affects your stack
Affects 1 package in euvd
Checking this CVE against your own stacks and servers is part of the Basic plan and up.
Technical ContextAI · show details
GStreamer is a multimedia framework whose gst-plugins-good package includes the FLV demuxer used to parse Flash Video container tags. The weakness is CWE-617 (Reachable Assertion): the demuxer does not adequately validate buffer sizes and data availability when handling enhanced audio and video tags, so malformed or truncated FLV input can reach an assertion failure instead of being rejected cleanly. CPE data identify gstreamer_project:gst-plugins-good and Red Hat Enterprise Linux 7, 8, 9, and 10 as affected product families, but the supplied strings do not give exact version ranges. The CVSS vector AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H describes a remotely supplied file or stream that requires user interaction, with availability-only impact; the supplied references point to GitLab merge request 11244.patch and GStreamer advisory SA-2026-0020 as the upstream fix path.
Know when Red Hat Enterprise Linux 10 gets its next vulnerability
- Watch products and get an email when something new is published
- Check this CVE against your own stack and servers
- Exploit and PoC references, threat intelligence from 22 sources
No credit card · 7-day full trial
Severity by source
AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
Primary rating from Vendor (redhat) · only source for this CVE.
CVSS VectorVendor: redhat
Lifecycle Timeline
2DescriptionCVE.org
A flaw was found in GStreamer's gst-plugins-good package. The FLV media demuxer does not properly validate buffer sizes and data availability when processing enhanced audio and video tags in malformed or truncated FLV streams. A remote attacker could exploit this vulnerability by providing a specially crafted FLV media file that, when opened or streamed by a GStreamer-based application, triggers an assertion failure or a process crash, leading to denial of service.
Threat Intelligence Overview
NVD
CVE.org
EPSS
Vulnrichment
How this decision was reached
The engine reads each signal below and applies a fixed list of rules from top to bottom. The first rule that matches sets the recommended action – like a statement, every line is shown.
What every action level means
SSVC AssessmentENISA
Priority Score
Attack Technique
Denial of Service attacks render applications or systems unavailable by overwhelming resources or triggering failure conditions.
More in Red Hat Enterprise Linux 10
View allHeap corruption via double-free in 389-ds-base's LDAP control parsing allows an unauthenticated remote attacker to crash
Remote code execution in Cockpit's web interface allows unauthenticated attackers to execute arbitrary commands on the h
Remote code execution in Samba's printing subsystem allows remote attackers to inject arbitrary shell commands via craft
Ghostscript can execute arbitrary shell commands with the privileges of its process when it renders a crafted PostScript
Use-after-free in librsvg during rendering of crafted SVG documents with nested XInclude directives and duplicate entity
A signed integer overflow vulnerability exists in the libtiff library's putcontig8bitYCbCr44tile function that leads to
The system CA trust store shipped in Red Hat's ca-certificates RPM packages includes eMudhra root authorities that signe
Authentication bypass in 389 Directory Server (shipped as Red Hat Directory Server 11-13 and within RHEL 6-10) lets remo
Remote code execution and privilege escalation in HPLIP (HP Linux Imaging and Printing) affects the hpcups print filter
Unauthenticated privilege escalation in FreeIPA (Red Hat Identity Management) allows a remote attacker to gain genuine a
A heap buffer overflow exists in libsoup's WebSocket permessage-deflate compression path: when a very large outbound mes
Remote code execution in libarchive on 32-bit systems allows unauthenticated attackers to execute arbitrary code via spe
Exploit-DB