DEBIAN-CVE-2026-125712: High severity debian/gst-plugins-base1.0 vulnerability
A flaw was found in GStreamer's gst-plugins-base RTCP SDES packet parser. A remote sender able to reach an active media session can supply a malformed SDES entry whose declared length exceeds the received packet. Missing bounds validation can cause the receiver to read beyond the packet buffer, potentially crashing the application or exposing a limited amount of process memory.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
debian/gst-plugins-base1.0to a version that resolves this vulnerability.Fixed in 1.28.4-1
Event History
Frequently Asked Questions
Which deployments are exposed to this issue?
Applications using Debian's gst-plugins-base1.0 and processing RTCP SDES packets during an active media session may be exposed if a remote sender can reach that session.
What does an attacker need to exploit it?
An attacker needs network reachability to an active media session and must be able to send a malformed RTCP SDES entry. No privileges or user interaction are indicated.
What is the likely operational impact?
A malformed declared length can make the receiver read beyond the received packet buffer. This may crash the application or disclose a limited amount of process memory.