GHSA-j9j5-89xh-84jfMediumCVSS 6.5

A flaw was found in GStreamer's gst-plugins-good package. The FLV media demuxer does not properly...

Published
November 3, 2026
Last Modified
November 3, 2026

🔗 CVE IDs covered (1)

📋 Description

A flaw was found in GStreamer's gst-plugins-good package. The FLV media demuxer does not properly validate buffer sizes and data availability when processing enhanced audio and video tags in malformed or truncated FLV streams. A remote attacker could exploit this vulnerability by providing a specially crafted FLV media file that, when opened or streamed by a GStreamer-based application, triggers an assertion failure or a process crash, leading to denial of service.

🔗 References (6)