Vulnerability · Published Sep 11, 2026 · Assigned by redhat
CVE-2026-88914Gstreamer1-plugins-good: gstreamer: integer overflow and out-of-bounds read in qtdemux cea-608 closed-caption parser
Medium 4.4
In plain English
A medium-severity integer overflow in Red Hat Enterprise Linux 10 from Red Hat. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.1% (higher than 2% of all known vulnerabilities). Fixed versions are available - upgrade the affected package.
Official description
A flaw was found in GStreamer's gst-plugins-good isomp4 plugin. When processing a specially crafted MP4 or MOV file containing CEA-608 closed-caption data, an integer overflow in 32-bit unsigned arithmetic can bypass a bounds check in the caption parser. This leads to an out-of-bounds heap read of up to 244 bytes, which is then included in the downstream caption output. An attacker could exploit this by tricking a user into opening a malicious media file, potentially resulting in disclosure of adjacent heap memory or application crash.
Affected packages & fixed versions
| Ecosystem | Package | Fixed in | Advisory |
|---|---|---|---|
| Debian:12 | gst-plugins-good1.0 | 1.22.0-5+deb12u4 | DEBIAN-CVE-2026-88914 |
| Debian:13 | gst-plugins-good1.0 | no fix listed | DEBIAN-CVE-2026-88914 |
| Debian:14 | gst-plugins-good1.0 | 1.28.7-1 | DEBIAN-CVE-2026-88914 |
| Ubuntu:22.04:LTS | gst-plugins-good1.0 | 1.20.3-0ubuntu1.10 | UBUNTU-CVE-2026-88914 |
| Ubuntu:22.04:LTS | gst-plugins-good1.0 | 1.20.3-0ubuntu1.10 | USN-8863-1 |
| Ubuntu:24.04:LTS | gst-plugins-good1.0 | 1.24.2-1ubuntu1.8 | USN-8863-1 |
| Ubuntu:24.04:LTS | gst-plugins-good1.0 | 1.24.2-1ubuntu1.8 | UBUNTU-CVE-2026-88914 |
| Ubuntu:26.04:LTS | gst-plugins-good1.0 | 1.28.2-2ubuntu0.4 | USN-8863-1 |
| Ubuntu:26.04:LTS | gst-plugins-good1.0 | 1.28.2-2ubuntu0.4 | UBUNTU-CVE-2026-88914 |
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| Red Hat | Red Hat Enterprise Linux 10 | see references |
| Red Hat | Red Hat Enterprise Linux 6 | see references |
| Red Hat | Red Hat Enterprise Linux 7 | see references |
| Red Hat | Red Hat Enterprise Linux 7 | see references |
| Red Hat | Red Hat Enterprise Linux 8 | see references |
| Red Hat | Red Hat Enterprise Linux 9 | see references |
Weakness: CWE-190 · Vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:L
References
- https://access.redhat.com/security/cve/CVE-2026-88914 vdb-entry, x_refsource_REDHAT
- RHBZ#2531416 issue-tracking, x_refsource_REDHAT
- https://gitlab.freedesktop.org/gstreamer/gstreamer/-/merge_requests/12433
- https://gstreamer.freedesktop.org/security/sa-2026-0079.html