An integer overflow vulnerability exists in the AV1 LEB128 variable-length integer parser of GStreamer. This flaw allows a remote attacker to cause a denial of service by crafting a malformed AV1 bitstream that triggers incorrect length calculations during stream processing, leading to application crashes.