CVE-2016-9810

CVE-2016-9810 describes a denial-of-service vulnerability in the gst_decode_chain_free_internal function of the flxdex decoder within GStreamer's gst-plugins-good, affecting versions prior to 1.10.2. An attacker can trigger an invalid memory read and crash by providing a specially crafted, invalid file, leading to an incorrect unref call. This vulnerability has a CVSS score of 5.5 (Medium), indicating a local attack vector with low complexity, requiring user interaction, and primarily impacting availability. There is no evidence of active exploitation, publicly available exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion or media coverage, suggesting a low current threat level.