CVE-2016-9810: The gst_decode_chain_free_internal function in the flxdex decoder in gst-plugins-good in GStreamer before 1...

Security readout for executives and security teams

CVE-2016-9810 is a crash bug in GStreamer’s gst-plugins-good flxdex decoder before 1.10.2. A malformed media file can trigger an invalid memory read and terminate the affected process. The documented impact is denial of service, not data theft or code execution. Exposure is most likely where GStreamer gst-plugins-good before 1.10.2 processes untrusted or externally supplied media files. Systems only processing trusted media or not using the flxdex decoder have lower practical exposure. The source bundle does not provide complete CPE or product inventory data. Handle during normal vulnerability remediation, with faster action for internet-facing or user-upload media processing services. The business risk is service disruption from crafted files, not a sourced claim of system takeover or active exploitation. Mitigation focus: Upgrade GStreamer gst-plugins-good to 1.10.2 or a vendor-fixed package.; Apply relevant distribution updates from Red Hat, Gentoo, or your platform vendor.; Prioritize hosts and services that process user-supplied media files..

Prepared

Jun 13, 2026, 12:51 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.