UBUNTU-CVE-2026-125712: Medium severity ubuntu/gst-plugins-base1.0 vulnerability
A flaw was found in GStreamer's gst-plugins-base RTCP SDES packet parser. A remote sender able to reach an active media session can supply a malformed SDES entry whose declared length exceeds the received packet. Missing bounds validation can cause the receiver to read beyond the packet buffer, potentially crashing the application or exposing a limited amount of process memory.
Affected Software
Event History
Frequently Asked Questions
Which deployments are exposed to this issue?
Applications using Ubuntu's gst-plugins-base1.0 are exposed when they have an active media session that can receive RTCP traffic from a remote sender.
What does an attacker need to exploit the flaw?
The attacker must be able to reach an active media session and send a malformed RTCP SDES entry whose declared length is larger than the received packet.
What is the expected impact of successful exploitation?
The receiver may read beyond the packet buffer. This can potentially crash the application or disclose a limited amount of process memory.