{"description":"Trending threats, MITRE ATT\u0026CK coverage, and detection metadata. Fed continuously.","favicon":"https://feed.craftedsignal.io/favicon-32x32.png","feed_url":"https://feed.craftedsignal.io/products/gstreamer--unknown-fixed-version/feed.json","home_page_url":"https://feed.craftedsignal.io/","icon":"https://feed.craftedsignal.io/apple-touch-icon.png","items":[{"_cs_actors":[],"_cs_cpes":[],"_cs_cves":[{"cvss":7.5,"id":"CVE-2026-125704"}],"_cs_exploited":false,"_cs_has_poc":false,"_cs_poc_references":[],"_cs_products":["GStreamer (\u003c unknown fixed version)"],"_cs_severities":["low"],"_cs_tags":[],"_cs_type":"advisory","_cs_vendors":[],"content_html":"\u003cp\u003eA use-after-free vulnerability exists in GStreamer core during the deserialization of buffer values. When the library processes serialized buffer data containing invalid characters, an error path triggers a premature free of a mapped buffer before it is unmapped. This flaw can be triggered remotely without user interaction, specifically when targeting a network-facing GStreamer Data Protocol (GDP) receiver. While the primary documented impact is an application crash, the memory corruption nature of the vulnerability may allow for further exploitation paths that remain currently undisclosed.\u003c/p\u003e\n\u003ch2 id=\"impact\"\u003eImpact\u003c/h2\u003e\n\u003cp\u003eSuccessful exploitation results in an application crash (denial of service). The vulnerability is reachable over the network without authentication or user interaction when the target application processes untrusted caps or structure data.\u003c/p\u003e\n\u003ch2 id=\"recommendation\"\u003eRecommendation\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eUpdate all GStreamer installations to the version containing the fix documented in the GStreamer security advisory (SA-2026-0028).\u003c/li\u003e\n\u003cli\u003eReview network-facing services using the GStreamer Data Protocol (GDP) and restrict access to trusted sources until patching is completed.\u003c/li\u003e\n\u003cli\u003eMonitor logs for repeated application crashes or service restarts in processes utilizing GStreamer libraries, which may indicate exploitation attempts.\u003c/li\u003e\n\u003c/ul\u003e\n","date_modified":"2026-11-10T13:47:02Z","date_published":"2026-11-10T13:47:02Z","id":"https://feed.craftedsignal.io/briefs/2026-11-gstreamer-uaf/","summary":"A use-after-free vulnerability in GStreamer core buffer value deserialization allows for remote unauthenticated denial-of-service against applications processing untrusted caps or structure data.","title":"GStreamer: Use-after-free in buffer value deserialization (CVE-2026-125704)","url":"https://feed.craftedsignal.io/briefs/2026-11-gstreamer-uaf/"}],"language":"en","title":"CraftedSignal Threat Feed - GStreamer (\u003c Unknown Fixed Version)","version":"https://jsonfeed.org/version/1.1"}