CVE WATCH / VULNERABILITY DETAIL
CVE-2026-125040
MEDIUMCVSS 6.5NVD feed
Published 9 November 2026 · tracked since 10 November 2026
Description
A flaw was found in the SRT and WebVTT subtitle parser in GStreamer's gst-plugins-base. While sanitizing inline subtitle markup, the parser repeatedly searches the remaining text with unanchored regular expressions. A crafted subtitle cue with a long line of unmatched markup-like text can force quad
References
- NVD — National Vulnerability Database
- CVE.org record (MITRE)
- CISA Known Exploited Vulnerabilities catalog
Latest tracked vulnerabilities
- CVE-2026-125198 LOW 2.5
- CVE-2026-125041 MEDIUM 5.5
- CVE-2026-121769 HIGH 8.5
- CVE-2026-60117 MEDIUM 6.2
- CVE-2026-123796
- CVE-2026-123373
- CVE-2026-123372
- CVE-2026-123371
- CVE-2026-123370
- CVE-2026-123369