REDHAT-BUG-2487613: Medium severity GStreamer GStreamer rmdemux (RealMedia demuxer) vulnerability
GStreamer RealMedia demuxer audio stream header OOB read. In gstrmdemuxparsemdpr(), audio header versions 4 and 5 read codec parameters at fixed byte offsets (22-69 for v4, 22-74 for v5) without bounds checking against the MDPR chunk length. OOB-read values control downstream buffer allocation, codec selection, and caps negotiation. No fix available; upstream recommends rmdemux rewrite. Reported via PSIRTSUPT-7239 by Tianshuo Han.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Compensating control
Mitigate the GStreamer RealMedia demuxer OOB read (PSIRTSUPT-7239) by avoiding RealMedia streams that require gst_rmdemux_parse_mdpr() until rmdemux is rewritten upstream; block/disable RealMedia (RealAudio/RealMedia) demuxing in your media pipeline where applicable.
- Operational
If RealMedia content may have been processed, review and harden downstream handling of caps/codec selection and buffer allocation to ensure OOB-influenced values from malformed streams cannot cause unsafe allocations (e.g., apply strict caps validation and bounds checks before using negotiated values).
Event History
Frequently Asked Questions
What is the severity of REDHAT-BUG-2487613?
The severity of REDHAT-BUG-2487613 is medium, rated at 4.
What type of vulnerability is REDHAT-BUG-2487613?
REDHAT-BUG-2487613 is an out-of-bounds read vulnerability in the GStreamer RealMedia demuxer.
How do I fix REDHAT-BUG-2487613?
To fix REDHAT-BUG-2487613, update your GStreamer package to the latest version addressing this vulnerability.
What is the impact of REDHAT-BUG-2487613?
The impact of REDHAT-BUG-2487613 includes potential uncontrolled memory access leading to application crashes or exploitation.
When was REDHAT-BUG-2487613 published?
REDHAT-BUG-2487613 was published on June 10, 2026.