CVE-2026-112214

A flaw was found in the GStreamer ASF demuxer in gst-plugins-ugly. When parsing a Simple Index object, an attacker-controlled entry count is used to size a heap allocation without being limited to the payload available in the object. Processing a crafted ASF, WMV, or WMA file can cause a very large memory allocation request and lead to denial of service if the allocation fails or the process is memory-constrained.

This Moderate severity flaw affects the ASF demuxer in gst-plugins-ugly / gstreamer1-plugins-ugly-free. A crafted ASF, WMV, or WMA file can cause the Simple Index parser to request an excessively large heap allocation because the entry count from the file is not clamped to the remaining object size before g_new0. Red Hat rates this Moderate the media may be delivered remotely but the victim application must process the file, and the confirmed impact is denial of service only.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.

Avoid opening untrusted ASF, WMV, or WMA files in GStreamer-based applications (including local players and media indexers/thumbnailers).