{"id":"AZL-112714","summary":"CVE-2026-119842 affecting package gstreamer1-plugins-base 1.20.0-3","details":"A flaw was found in GStreamer's gst-plugins-base MicroDVD subtitle parser. When processing a specially crafted subtitle file, the parser may dereference a NULL pointer, causing the application to crash when a user opens or plays media with a malformed MicroDVD (.sub) subtitle file.","modified":"2026-11-14T05:28:08Z","published":"2026-10-30T19:18:22Z","upstream":["CVE-2026-119842"],"references":[{"type":"WEB","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-119842"}],"affected":[{"package":{"name":"gstreamer1-plugins-base","ecosystem":"Azure Linux:3","purl":"pkg:rpm/azure-linux/gstreamer1-plugins-base"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"last_affected":"1.20.0-3"}]}],"database_specific":{"source":"https://github.com/microsoft/AzureLinuxVulnerabilityData/blob/main/osv/AZL-112714.json"}}],"schema_version":"1.9.2"}