CVE-2026-112214
Received Received - Intake

Heap Overflow in GStreamer ASF Demuxer

Publication date: 2026-10-19

Last updated on: 2026-10-19

Assigner: redhat-SADP

Description
A flaw was found in the GStreamer ASF demuxer in gst-plugins-ugly. When parsing a Simple Index object, an attacker-controlled entry count is used to size a heap allocation without being limited to the payload available in the object. Processing a crafted ASF, WMV, or WMA file can cause a very large memory allocation request and lead to denial of service if the allocation fails or the process is memory-constrained.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-10-19
Last Modified
2026-10-19
Generated
2026-10-19
AI Q&A
2026-10-19
EPSS Evaluated
N/A
NVD
CVE-2026-112214
EUVD
EUVD-2026-104253

Affected Vendors & Products

Showing 2 associated CPEs
Vendor Product Version / Range
Red Hat Red Hat Enterprise Linux 10 *
Red Hat Red Hat Enterprise Linux 9 *

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-789 The product allocates memory based on an untrusted, large size value, but it does not ensure that the size is within expected limits, allowing arbitrary amounts of memory to be allocated.

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

This vulnerability is in the GStreamer ASF demuxer (gst-plugins-ugly) where a Simple Index object parser reads an attacker-controlled entry count from media files and allocates an index table of that size without validating the count against the remaining bytes in the object. This can lead to excessively large heap allocations, causing the application to crash or terminate if the allocation fails or memory limits are exceeded.

Detection Guidance

Detecting this vulnerability requires monitoring for crashes or excessive memory usage when processing ASF, WMV, or WMA files with GStreamer-based applications. Check system logs for out-of-memory errors or application aborts after media file processing. Use tools like 'strace' or 'valgrind' to trace memory allocations during file parsing.

Impact Analysis

If you process a specially crafted ASF, WMV, or WMA file, this vulnerability can cause a denial of service by triggering an excessively large memory allocation request. The application may abort or terminate if the allocation fails or if the system is memory-constrained. The attacker needs to deliver the malicious file to you, and you must process it for the vulnerability to be exploited.

Mitigation Strategies

Avoid opening untrusted ASF, WMV, or WMA files in GStreamer-based applications. Update gst-plugins-ugly to the latest patched version if available. Implement file validation or sandboxing for media processing to limit exposure. Monitor for crashes in GStreamer applications as potential indicators of exploitation.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-112214. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart