CVE-2026-119842

A vulnerability exists in the GStreamer gst-plugins-base MicroDVD subtitle parser. When processing a specially crafted, malformed MicroDVD (.sub) subtitle file, the parser may dereference a NULL pointer due to a missing closing-brace check. This flaw can cause the application to crash when a user...

CVE-2026-119842 Gst-plugins-base: gst-plugins-base: null-pointer dereference in mdvdsub subtitle parser via missing closing-brace check

A flaw was found in GStreamer's gst-plugins-base MicroDVD subtitle parser. When processing a specially crafted subtitle file, the parser may dereference a NULL pointer, causing the application to crash when a user opens or plays media with a malformed MicroDVD .sub subtitle file...

EUVD-2026-114326

A flaw was found in GStreamer's gst-plugins-base MicroDVD subtitle parser. When processing a specially crafted subtitle file, the parser may dereference a NULL pointer, causing the application to crash when a user opens or plays media with a malformed MicroDVD .sub subtitle file...

CVE-2026-119842: Red Hat: A flaw was found in GStreamer's gst-plugins-base MicroDVD subtitle parser

A flaw was found in GStreamer's gst-plugins-base MicroDVD subtitle parser. When processing a specially crafted subtitle file, the parser may dereference a NULL pointer, causing the application to crash when a user opens or plays media with a malformed MicroDVD .sub subtitle file...

CVE-2026-35031

CVE-2026-35031: Jellyfin Subtitle Upload Path Traversal to RCE -darkred?style=flat-square -orange?style=flat-square TL;DR A critical path traversal vulnerability in Jellyfin Media Server allows authenticated users with "Upload Subtitles" permission to upload files to arbitrary locations on disk. ...

CVE-2026-95127

A flaw was found in libass. A remote attacker could exploit this vulnerability to cause a Denial of Service DoS by providing specially crafted subtitle input. When processed by the outline construction routine assoutlineconstruct, the malformed data triggers an unexpected failure that causes the...

CVE-2026-52167

A stack overflow in the gensubParsePsb function of AOC LC32D1320 v2.05 allows attackers to cause a Denial of Service DoS via supplying a crafted .PSB subtitle file...

PT-2026-114972

A stack overflow in the gensub ParsePsb function of AOC LC32D1320 v2.05 allows attackers to cause a Denial of Service DoS via supplying a crafted .PSB subtitle file...

CVE-2026-52167

A stack overflow in the gensubParsePsb function of AOC LC32D1320 v2.05 allows attackers to cause a Denial of Service DoS via supplying a crafted .PSB subtitle file...

CVE-2026-52167

A stack overflow in the gensubParsePsb function of AOC LC32D1320 v2.05 allows attackers to cause a Denial of Service DoS via supplying a crafted .PSB subtitle file...

CVE-2026-52167: Undefined Security Weakness

A stack overflow in the gensubParsePsb function of AOC LC32D1320 v2.05 allows attackers to cause a Denial of Service DoS via supplying a crafted .PSB subtitle file...

[SECURITY] Fedora 43 Update: aegisub-3.5.0-1.fc43

Aegisub is an advanced subtitle editor which assists in the creation of subtitles, timing, and editing of subtitle files. It supports a wide range of formats and provides powerful visual typesetting tools...

Fedora 43 : aegisub (2026-78a11da997)

The remote Fedora 43 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-78a11da997 advisory. Update to Aegisub 3.5.0, fixing CVE-2026-92705: arbitrary code execution when opening crafted ASS subtitle files containing associated Automation script...

Fedora 44 : aegisub (2026-0c6d4471fc)

The remote Fedora 44 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-0c6d4471fc advisory. Update to Aegisub 3.5.0, fixing CVE-2026-92705: arbitrary code execution when opening crafted ASS subtitle files containing associated Automation script...

CVE-2026-92705

A flaw was found in Aegisub. The application automatically loads and runs automation scripts referenced within Advanced SubStation Alpha ASS subtitle project files without prompting the user for confirmation. By tricking a user into opening a specially crafted subtitle file referencing a maliciou...

PT-2026-109323

Name of the Vulnerable Software and Affected Versions Aegisub versions 3.2.0 through 3.4.2 Description Aegisub automatically loads Automation scripts referenced by the Automation Scripts metadata in ASS subtitle projects without verifying user trust in the scripts or their authors. This allows an...

Astra Linux – Vulnerability in gst-plugins-base1.0

In GStreamer through 1.26.1, the subparse plugin’s subripunescapeformatting function may dereference a NULL pointer during the parsing of a subtitle file, resulting in a crash...

[SECURITY] Fedora 45 Update: subtitleeditor-0.56.2-7.fc45

Subtitle Editor is a GTK+3 tool to edit subtitles for GNU/Linux/BSD. It can be used for new subtitles or as a tool to transform, edit, correct and refine existing subtitle. This program also shows sound waves, which makes it easier to synchronize subtitles to voices...

CLEANSTART-2024-EK00824 denial of service in the subtitle decoder in FFmpeg 3

Security vulnerability affects the ffmpeg4 package. A denial of service in the subtitle decoder in FFmpeg 3...

Rocky Linux 8 [CIQ] Security Update: gstreamer1-plugins-base / gstreamer1-plugins-base-debuginfo / etc (crlsa-2024_3088)

The Rocky Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CIQ crlsa-20243088 advisory. gstreamer-plugins-base: heap overwrite in subtitle parsing CVE-2023-37328 Tenable has extracted the preceding description block directly from the CIQ security...