REDHAT-BUG-2495903: Null Pointer Dereference

Published Jul 1, 2026

Updated

A flaw was found in PipeWire's RAOP (AirPlay) RTSP client. The client does not validate Content-Length values from remote servers and does not check the return value of memory allocation functions. A rogue AirPlay device on the local network can send a crafted RTSP response with an extremely large Content-Length, causing a NULL pointer dereference and crashing the PipeWire daemon.

Affected Software

1 affected component

PipeWire RAOP (AirPlay) RTSP client

Event History

Jul 1, 2026

Data Sourced

via Red Hat·12:21 PM

DescriptionSeverityAffected Software

Frequently Asked Questions

What is the severity of REDHAT-BUG-2495903?

The severity of REDHAT-BUG-2495903 is classified as medium.

How do I fix REDHAT-BUG-2495903?

To fix REDHAT-BUG-2495903, update the PipeWire RAOP (AirPlay) RTSP client to the latest version that addresses this issue.

What impact does REDHAT-BUG-2495903 have on my system?

REDHAT-BUG-2495903 can potentially allow a rogue AirPlay device to exploit the vulnerability, leading to denial of service or other impacts.

Which software is affected by REDHAT-BUG-2495903?

The affected software for REDHAT-BUG-2495903 is the PipeWire RAOP (AirPlay) RTSP client.

What type of vulnerability is REDHAT-BUG-2495903?

REDHAT-BUG-2495903 is a vulnerability categorized under Null Pointer Dereference.