{"affected":[{"defaultStatus":"unaffected","ecosystem":"https://access.redhat.com/downloads/content/package-browser/","packageName":"gstreamer1-plugins-good","product":"Red Hat Enterprise Linux 10","source":"CNA: redhat","vendor":"Red Hat","versions":[]},{"defaultStatus":"unaffected","ecosystem":"https://access.redhat.com/downloads/content/package-browser/","packageName":"gstreamer1-plugins-good","product":"Red Hat Enterprise Linux 7","source":"CNA: redhat","vendor":"Red Hat","versions":[]},{"defaultStatus":"unaffected","ecosystem":"https://access.redhat.com/downloads/content/package-browser/","packageName":"gstreamer1-plugins-good","product":"Red Hat Enterprise Linux 8","source":"CNA: redhat","vendor":"Red Hat","versions":[]},{"defaultStatus":"unaffected","ecosystem":"https://access.redhat.com/downloads/content/package-browser/","packageName":"gstreamer1-plugins-good","product":"Red Hat Enterprise Linux 9","source":"CNA: redhat","vendor":"Red Hat","versions":[]},{"ecosystem":"https://gstreamer.freedesktop.org/","product":"gst-plugins-good","source":"CNA: redhat","vendor":"GStreamer project","versions":[{"lessThan":"1.28.2","status":"affected","version":"0","versionType":"semver"},{"status":"unaffected","version":"1.28.2"}]}],"cveId":"CVE-2026-119843","cwes":["CWE-617"],"description":"A flaw was found in GStreamer's gst-plugins-good package. The FLV media demuxer does not properly validate buffer sizes and data availability when processing enhanced audio and video tags in malformed or truncated FLV streams. A remote attacker could exploit this vulnerability by providing a specially crafted FLV media file that, when opened or streamed by a GStreamer-based application, triggers an assertion failure or a process crash, leading to denial of service.","epss":null,"exploits":[],"kev":null,"metrics":[{"score":6.5,"severity":"medium","source":"CNA: redhat","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","version":"3.1"},{"score":6.5,"severity":"medium","source":"NVD: secalert@redhat.com","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","version":"3.1"}],"modifiedAt":1793701036260,"publishedAt":1793699125949,"references":[{"source":"CNA: redhat","tags":["vdb-entry","x_refsource_REDHAT"],"url":"https://access.redhat.com/security/cve/CVE-2026-119843"},{"source":"CNA: redhat","tags":["issue-tracking","x_refsource_REDHAT"],"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2564182"},{"source":"CNA: redhat","tags":[],"url":"https://gitlab.freedesktop.org/gstreamer/gstreamer/-/merge_requests/11244.patch"},{"source":"CNA: redhat","tags":[],"url":"https://gstreamer.freedesktop.org/security/sa-2026-0020.html"},{"source":"secalert@redhat.com","tags":[],"url":"https://access.redhat.com/security/cve/CVE-2026-119843"},{"source":"secalert@redhat.com","tags":[],"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2564182"},{"source":"secalert@redhat.com","tags":[],"url":"https://gitlab.freedesktop.org/gstreamer/gstreamer/-/merge_requests/11244.patch"},{"source":"secalert@redhat.com","tags":[],"url":"https://gstreamer.freedesktop.org/security/sa-2026-0020.html"}],"remediation":[{"kind":"workaround","source":"CNA: redhat","text":"No mitigation is currently available that meets Red Hat Product Security's standards for usability, deployment, applicability, or stability."}],"revision":"ae8863a69440053bbf209d23ac59eb51b63582889db68b42b56e61472cd38d81","sources":[{"modifiedAt":1793699125949,"name":"CNA: redhat","retrievedAt":1793700530989,"url":"https://www.cve.org/CVERecord?id=CVE-2026-119843"},{"modifiedAt":1793701036260,"name":"NVD","retrievedAt":1793708293568,"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-119843"}],"ssvc":null,"status":"published","title":"Gst-plugins-good: assertion failures in FLV demuxer when parsing malformed enhanced audio/video tags","updatedAt":1793708293568}