CVE-2026-125712
HIGH
NVD
CVSS Score
7.5
Severity
HIGH
Published
Nov 10, 2026
Vendor
unknown
Description
A flaw was found in GStreamer's gst-plugins-base RTCP SDES packet parser. A remote sender able to reach an active media session can supply a malformed SDES entry whose declared length exceeds the received packet. Missing bounds validation can cause the receiver to read beyond the packet buffer, potentially crashing the application or exposing a limited amount of process memory.