CVE-2026-52721 describes multiple out-of-bounds read vulnerabilities in GStreamer's pcapparse element on Red Hat Enterprise Linux 10. The vulnerabilities arise from improper handling of malformed PCAP records, leading to buffer over-reads during IPv4 and TCP header parsing. Because the pcapparse element is primarily used in debugging pipelines, the real-world exposure is limited. Exploitation requires local attacker interaction to convince a user to process a malicious PCAP file, which may result in application crashes or limited information disclosure.

Successful exploitation can lead to application crashes (denial of service) or limited information disclosure due to out-of-bounds reads. The vulnerability requires local user interaction with a specially crafted PCAP file. The CVSS 3.1 base score is 5.3 (medium severity), reflecting local attack vector, high attack complexity, no privileges required, and user interaction needed. Confidentiality impact is low, integrity impact is none, and availability impact is high.

The vendor advisory does not specify any patch or remediation level at this time. Patch status is not yet confirmed — check the Red Hat advisory at https://access.redhat.com/security/cve/CVE-2026-52721 for current remediation guidance. Until a fix is available, avoid processing untrusted PCAP files with the pcapparse element, especially in debugging pipelines.