CVE-2026-125704: Gstreamer: gstreamer: use-after-free in gstreamer core buffer value deserialization
A use-after-free flaw was found in GStreamer core buffer value deserialization. When crafted serialized buffer data contains an invalid character, an error path frees a mapped buffer before unmapping it. An application that parses untrusted caps or structure data could crash; a network-facing GStreamer Data Protocol receiver can process such data without user interaction. Further impact has not been established.
Other sources
GStreamer-SA-2026-0028: Use-after-free in GStreamer core buffer value deserialization. Advisory details and affected version range were not available from the page fetch; the OSIM record is based on the published advisory title and date.
— Red Hat
Affected Software
Event History
Frequently Asked Questions
Which deployments are most exposed to this issue?
Applications that parse untrusted GStreamer caps or structure data are exposed. A network-facing GStreamer Data Protocol receiver can process malicious serialized buffer data remotely without user interaction.
What does an attacker need to trigger the flaw?
An attacker needs to provide crafted serialized buffer data containing an invalid character to a vulnerable parsing path. No privileges or user interaction are required for a network-facing receiver that accepts this data.
What is the known impact?
The established impact is an application crash caused by a use-after-free during an error path. Further impact has not been established.