The vulnerability is caused by improper handling of certain malformed SubRip subtitle files. When the parser encounters specially crafted data, it can trigger a NULL pointer dereference, leading to a crash of the application using GStreamer for media playback or processing.