NULL Pointer Dereference in GStreamer MicroDVD Subtitle Parser
CVE-2026-119842

6.5MEDIUM

Key Information:

Vendor: Red Hat
Status: Red Hat Enterprise Linux 10; Red Hat Enterprise Linux 6; Red Hat Enterprise Linux 7; Red Hat Enterprise Linux 8
Vendor: CVE Published:; 30 October 2026

What is CVE-2026-119842?

A vulnerability exists within the GStreamer framework's MicroDVD subtitle parser, where a specially crafted .sub subtitle file can trigger a NULL pointer dereference. This flaw can cause the application to crash, affecting media playback when users try to open or play media files containing malformed subtitle content. Proper input validation and error handling are essential to mitigate the risk associated with this vulnerability.