CVE-2026-119729

Name of the Vulnerable Software and Affected Versions GStreamer (affected versions not specified)

Description An integer overflow exists in the AV1 LEB128 variable-length integer parser. A remote attacker can cause a denial of service by providing a malformed AV1 bitstream containing an invalid LEB128-encoded value. This leads to incorrect length values during stream processing, resulting in an application crash.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.