Red Hat Security Advisory: gstreamer1-plugins-good security update
GStreamer is a streaming media framework based on graphs of filters which operate on media data. The gstreamer1-plugins-good packages contain a collection of well-supported plug-ins of good quality and under the LGPL license. Security Fix(es): * gst-plugins-good: gst-plugins-good: unbounded memory growth in rtph264depay and rtph265depay RTP depayloaders (CVE-2026-18649) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
AI Analysis
Technical Summary
The vulnerability in GStreamer's gst-plugins-good package affects the rtph264depay and rtph265depay RTP depayloader elements by failing to enforce a maximum size limit on the reassembly buffer during fragmented RTP packet processing. An unauthenticated remote attacker can send a continuous stream of RTP fragments without an end-of-fragment marker, causing the buffer to grow indefinitely until process memory is exhausted, resulting in denial of service through process termination. The vulnerability is exploitable when RTP streams from untrusted sources are processed without authentication layers. Deployments using SRTP or DTLS-SRTP reject unauthenticated packets before they reach the depayloaders, significantly reducing the attack surface. The vulnerability does not affect desktop media playback from local files.
Potential Impact
The impact is a denial of service condition caused by unbounded memory growth in the RTP depayloader elements, leading to process termination. There is no confidentiality or integrity impact reported. The vulnerability is exploitable remotely without authentication if unauthenticated RTP streams are processed. Deployments using authenticated RTP transport mechanisms such as SRTP or DTLS-SRTP are not affected.
Mitigation Recommendations
A patch is available as indicated by the Red Hat advisory. Until patched, mitigation includes deploying SRTP or DTLS-SRTP to authenticate RTP packets, which prevents unauthenticated fragments from reaching the vulnerable depayloaders. Network-level restrictions such as firewall rules can limit RTP traffic to trusted sources. Alternatively, the RTP plugin can be disabled at build time or the vulnerable elements can be excluded at runtime by adjusting plugin ranks to prevent automatic usage.
Red Hat Security Advisory: gstreamer1-plugins-good security update
Description
GStreamer is a streaming media framework based on graphs of filters which operate on media data. The gstreamer1-plugins-good packages contain a collection of well-supported plug-ins of good quality and under the LGPL license. Security Fix(es): * gst-plugins-good: gst-plugins-good: unbounded memory growth in rtph264depay and rtph265depay RTP depayloaders (CVE-2026-18649) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Affected software
AI-Powered Analysis
Machine-generated threat intelligence
Technical Analysis
The vulnerability in GStreamer's gst-plugins-good package affects the rtph264depay and rtph265depay RTP depayloader elements by failing to enforce a maximum size limit on the reassembly buffer during fragmented RTP packet processing. An unauthenticated remote attacker can send a continuous stream of RTP fragments without an end-of-fragment marker, causing the buffer to grow indefinitely until process memory is exhausted, resulting in denial of service through process termination. The vulnerability is exploitable when RTP streams from untrusted sources are processed without authentication layers. Deployments using SRTP or DTLS-SRTP reject unauthenticated packets before they reach the depayloaders, significantly reducing the attack surface. The vulnerability does not affect desktop media playback from local files.
Potential Impact
The impact is a denial of service condition caused by unbounded memory growth in the RTP depayloader elements, leading to process termination. There is no confidentiality or integrity impact reported. The vulnerability is exploitable remotely without authentication if unauthenticated RTP streams are processed. Deployments using authenticated RTP transport mechanisms such as SRTP or DTLS-SRTP are not affected.
Mitigation Recommendations
A patch is available as indicated by the Red Hat advisory. Until patched, mitigation includes deploying SRTP or DTLS-SRTP to authenticate RTP packets, which prevents unauthenticated fragments from reaching the vulnerable depayloaders. Network-level restrictions such as firewall rules can limit RTP traffic to trusted sources. Alternatively, the RTP plugin can be disabled at build time or the vulnerable elements can be excluded at runtime by adjusting plugin ranks to prevent automatic usage.
Technical Details
- Gcve Source
- db.gcve.eu
- Osv Id
- GHSA-wr93-5xph-995g
- Osv Schema Version
- 1.4.0
- Aliases
- ["CVE-2026-18649"]
- Database Specific Severity
- HIGH
- Cvss Version
- 3.1
- State
- PUBLISHED
Threat ID: 6a74cfa1bf8831d5391b0d7d
Added to database: 08/06/2026, 18:17:05 UTC
Last enriched: 09/12/2026, 06:47:07 UTC
Last updated: 09/21/2026, 22:01:32 UTC
Views: 111
Community Reviews
0 reviewsCrowdsource mitigation strategies, share intel context, and vote on the most helpful responses. Sign in to add your voice and help keep defenders ahead.
Want to contribute mitigation steps or threat intel context? Sign in or create an account to join the community discussion.
Actions
Updates to AI analysis require Pro Console access. Upgrade inside Console → Billing.
External Links
Need more coverage?
Upgrade to Pro Console for AI refresh and higher limits.
For incident response and remediation, OffSeq services can help resolve threats faster.
Latest Threats
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.