CVE-2017-5842: The html_context_handle_element function in gst/subparse/samiparse.c in gst-plugins-base in GStreamer befor...

Security readout for executives and security teams

CVE-2017-5842 is a denial-of-service issue in GStreamer’s SMI subtitle parsing. If an application processes a malicious SMI subtitle file with affected gst-plugins-base versions before 1.10.3, it can crash or corrupt memory. The main business concern is service disruption in systems handling untrusted media or subtitle files. Exposure is most likely where Linux systems, desktop applications, media services, or upload pipelines use GStreamer gst-plugins-base to parse SMI/SAMI subtitles from untrusted sources. The provided affected-product metadata is incomplete, so confirm installed package names and versions through distribution inventories. Prioritize remediation where untrusted media or subtitle files are processed. For general workstations, handle through normal patch management. For public upload or automated media-processing services, patch sooner because a crafted file could disrupt service availability. Mitigation focus: Upgrade GStreamer gst-plugins-base to 1.10.3 or later where applicable.; Apply fixed distribution packages from Debian, Red Hat, Gentoo, or your vendor.; Restrict processing of untrusted SMI/SAMI subtitle files until patched..

Prepared

Jun 13, 2026, 06:20 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.