Detections
Analytics
CVE-2026-125712
high
Description
A flaw was found in GStreamer's gst-plugins-base RTCP SDES packet parser. A remote sender able to reach an active media session can supply a malformed SDES entry whose declared length exceeds the received packet. Missing bounds validation can cause the receiver to read beyond the packet buffer, potentially crashing the application or exposing a limited amount of process memory.
References
https://gstreamer.freedesktop.org/security/sa-2026-0030.html
https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-120881