A vulnerability was found in the GStreamer RealMedia demuxer (gst-plugins-ugly). When processing a RealMedia (.rm) file, the demuxer parses MDPR (media properties) chunks to configure audio streams. For audio stream header versions 4 and 5, the parser reads fields such as codec type, packet size, sample rate, channel count, and extra codec data length from fixed offsets within the chunk without first checking that the chunk contains enough data. If a malicious file provides an MDPR chunk that is too small to contain a complete audio stream header, the parser reads beyond the end of the buffer. This can cause the application to crash. In some cases, bytes read past the buffer boundary may be incorporated into stream metadata, which could result in limited information disclosure.

oracle_linux ELSA-2026-36674: ELSA-2026-36674:  gstreamer1-plugins-ugly-free security update (MODERATE)

redhat RHSA-2026:36674: RHSA-2026:36674: gstreamer1-plugins-ugly-free security update (Moderate)

The remote Redhat Enterprise Linux 10 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2026:36673 advisory.

    GStreamer is a streaming media framework, based on graphs of elements which operate on media data.  This     package contains plug-ins whose license is not fully compatible with LGPL.

    Security Fix(es):

    * gstreamer1-plugins-ugly-free: GStreamer: Out-of-bounds read in RealMedia demuxer audio stream header     parser (CVE-2026-53703)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the 4e82a0e6-6801-42c6-8fb6-91b6b275a9e1 advisory.

    The GStreamer project reports:
    Multiple security issues were identified and fixed in the GStreamer framework.

Tenable has extracted the preceding description block directly from the FreeBSD security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - A vulnerability was found in the GStreamer RealMedia demuxer (gst-plugins-ugly). When processing a     RealMedia (.rm) file, the demuxer parses MDPR (media properties) chunks to configure audio streams. For     audio stream header versions 4 and 5, the parser reads fields such as codec type, packet size, sample     rate, channel count, and extra codec data length from fixed offsets within the chunk without first     checking that the chunk contains enough data. If a malicious file provides an MDPR chunk that is too small     to contain a complete audio stream header, the parser reads beyond the end of the buffer. This can cause     the application to crash. In some cases, bytes read past the buffer boundary may be incorporated into     stream metadata, which could result in limited information disclosure. (CVE-2026-53703)

Note that Nessus relies on the presence of the package as reported by the vendor.

ID	Name	Product	Family	Severity
325666	RHEL 10 : gstreamer1-plugins-ugly-free (RHSA-2026:36673)	Nessus	Red Hat Local Security Checks	high
323684	FreeBSD : gstreamer1 -- multiple vulnerabilities (4e82a0e6-6801-42c6-8fb6-91b6b275a9e1)	Nessus	FreeBSD Local Security Checks	high
321134	Linux Distros Unpatched Vulnerability : CVE-2026-53703	Nessus	Misc.	high

Detections

Analytics

CVE-2026-53703

high

Tenable Plugins

Coming Soon

high

high

high