CVE-2026-119842

A flaw was found in GStreamer's gst-plugins-base MicroDVD subtitle parser. When processing a specially crafted subtitle file, the parser may dereference a NULL pointer, causing the application to crash when a user opens or plays media with a malformed MicroDVD .sub subtitle file...

Fedora 45 : aegisub (2026-d296db490c)

The remote Fedora 45 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-d296db490c advisory. Update to Aegisub 3.5.0, fixing CVE-2026-92705: arbitrary code execution when opening crafted ASS subtitle files containing associated Automation script...

CVE-2026-119842

A flaw was found in GStreamer's gst-plugins-base MicroDVD subtitle parser. When processing a specially crafted subtitle file, the parser may dereference a NULL pointer, causing the application to crash when a user opens or plays media with a malformed MicroDVD .sub subtitle file...

CVE-2026-119842

A vulnerability exists in the GStreamer gst-plugins-base MicroDVD subtitle parser. When processing a specially crafted, malformed MicroDVD (.sub) subtitle file, the parser may dereference a NULL pointer due to a missing closing-brace check. This flaw can cause the application to crash when a user...

CVE-2026-119842 Gst-plugins-base: gst-plugins-base: null-pointer dereference in mdvdsub subtitle parser via missing closing-brace check

A flaw was found in GStreamer's gst-plugins-base MicroDVD subtitle parser. When processing a specially crafted subtitle file, the parser may dereference a NULL pointer, causing the application to crash when a user opens or plays media with a malformed MicroDVD .sub subtitle file...

CVE-2026-119842 Gst-plugins-base: gst-plugins-base: null-pointer dereference in mdvdsub subtitle parser via missing closing-brace check

A flaw was found in GStreamer's gst-plugins-base MicroDVD subtitle parser. When processing a specially crafted subtitle file, the parser may dereference a NULL pointer, causing the application to crash when a user opens or plays media with a malformed MicroDVD .sub subtitle file...

EUVD-2026-114326

A flaw was found in GStreamer's gst-plugins-base MicroDVD subtitle parser. When processing a specially crafted subtitle file, the parser may dereference a NULL pointer, causing the application to crash when a user opens or plays media with a malformed MicroDVD .sub subtitle file...

CLEANSTART-2025-MD45468 denial of service in the subtitle decoder in FFmpeg 3

Security vulnerability affects the ffmpeg package. A denial of service in the subtitle decoder in FFmpeg 3...

CVE-2026-119842: Red Hat, GStreamer project: A flaw was found in GStreamer's gst-plugins-base MicroDVD subtitle parser

A flaw was found in GStreamer's gst-plugins-base MicroDVD subtitle parser. When processing a specially crafted subtitle file, the parser may dereference a NULL pointer, causing the application to crash when a user opens or plays media with a malformed MicroDVD .sub subtitle file...

CVE-2026-35031

CVE-2026-35031: Jellyfin Subtitle Upload Path Traversal to RCE -darkred?style=flat-square -orange?style=flat-square TL;DR A critical path traversal vulnerability in Jellyfin Media Server allows authenticated users with "Upload Subtitles" permission to upload files to arbitrary locations on disk. ...

CVE-2026-95127

A flaw was found in libass. A remote attacker could exploit this vulnerability to cause a Denial of Service DoS by providing specially crafted subtitle input. When processed by the outline construction routine assoutlineconstruct, the malformed data triggers an unexpected failure that causes the...

CVE-2026-52167

A stack overflow in the gensubParsePsb function of AOC LC32D1320 v2.05 allows attackers to cause a Denial of Service DoS via supplying a crafted .PSB subtitle file...

Astra Linux – vulnerability in gst-plugins-base1.0

In GStreamer up to version 1.26.1, the tmplayerparseline function within the subparse plugin may dereference a NULL pointer while parsing a subtitle file, resulting in a crash...

Astra Linux – vulnerability in gst-plugins-base1.0

In GStreamer up to version 1.26.1, the subripunescapeformatting function in the subparse plugin may dereference a NULL pointer while parsing a subtitle file, resulting in a crash...

CVE-2026-52167: Undefined Security Weakness

A stack overflow in the gensubParsePsb function of AOC LC32D1320 v2.05 allows attackers to cause a Denial of Service DoS via supplying a crafted .PSB subtitle file...

CVE-2026-52167

A stack overflow in the gensubParsePsb function of AOC LC32D1320 v2.05 allows attackers to cause a Denial of Service DoS via supplying a crafted .PSB subtitle file...

PT-2026-114972

A stack overflow in the gensub ParsePsb function of AOC LC32D1320 v2.05 allows attackers to cause a Denial of Service DoS via supplying a crafted .PSB subtitle file...

CVE-2026-52167

A stack overflow in the gensubParsePsb function of AOC LC32D1320 v2.05 allows attackers to cause a Denial of Service DoS via supplying a crafted .PSB subtitle file...

[SECURITY] Fedora 43 Update: aegisub-3.5.0-1.fc43

Aegisub is an advanced subtitle editor which assists in the creation of subtitles, timing, and editing of subtitle files. It supports a wide range of formats and provides powerful visual typesetting tools...

Fedora 44 : aegisub (2026-0c6d4471fc)

The remote Fedora 44 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-0c6d4471fc advisory. Update to Aegisub 3.5.0, fixing CVE-2026-92705: arbitrary code execution when opening crafted ASS subtitle files containing associated Automation script...