CVE-2026-119729

A vulnerability exists in GStreamer (specifically within gst-plugins-base/gst-plugins-bad ) due to an integer overflow in the AV1 LEB128 variable-length integer parser. A remote attacker can trigger this flaw by providing a malformed AV1 bitstream containing an invalid LEB128-encoded value. This ...

CVE-2026-119729 Gst-plugins-base: gst-plugins-bad: gst-plugins-base/gst-plugins-bad: integer overflow in av1 leb128 parser allows denial of service

A flaw was found in GStreamer. An integer overflow vulnerability in the AV1 LEB128 variable-length integer parser allows a remote attacker to cause a crash in applications that process AV1 media content. By crafting a malformed AV1 bitstream containing an invalid LEB128-encoded value, an attacker...