GStreamer: Use-after-free in buffer value deserialization (CVE-2026-125704)

A use-after-free vulnerability exists in GStreamer core during the deserialization of buffer values. When the library processes serialized buffer data containing invalid characters, an error path triggers a premature free of a mapped buffer before it is unmapped. This flaw can be triggered remotely without user interaction, specifically when targeting a network-facing GStreamer Data Protocol (GDP) receiver. While the primary documented impact is an application crash, the memory corruption nature of the vulnerability may allow for further exploitation paths that remain currently undisclosed.

Impact

Successful exploitation results in an application crash (denial of service). The vulnerability is reachable over the network without authentication or user interaction when the target application processes untrusted caps or structure data.

Recommendation

• Update all GStreamer installations to the version containing the fix documented in the GStreamer security advisory (SA-2026-0028).
• Review network-facing services using the GStreamer Data Protocol (GDP) and restrict access to trusted sources until patching is completed.
• Monitor logs for repeated application crashes or service restarts in processes utilizing GStreamer libraries, which may indicate exploitation attempts.