Integer Overflow Vulnerability in GStreamer AV1 Parser Affects Multiple Products
CVE-2026-119729

6.5MEDIUM

Key Information:

Vendor: Red Hat
Status: Red Hat Enterprise Linux 10; Red Hat Enterprise Linux 6; Red Hat Enterprise Linux 7; Red Hat Enterprise Linux 8
Vendor: CVE Published:; 30 October 2026

What is CVE-2026-119729?

A flaw in the AV1 LEB128 variable-length integer parser of GStreamer can lead to serious security implications. By manipulating AV1 bitstreams to include an invalid LEB128-encoded value, an attacker could trigger an integer overflow during the processing of media content. This flaw could result in the application crashing, creating a denial of service situation for users relying on GStreamer to handle AV1 media streams.