The vulnerability exists in the GStreamer RealMedia demuxer component of the gst-plugins-ugly package used in Red Hat Enterprise Linux 10. When parsing MDPR chunks of RealMedia files, the demuxer reads fixed offsets for audio stream header fields without verifying chunk size, leading to out-of-bounds reads if the chunk is too small. This can cause crashes and potentially disclose limited memory contents. Red Hat has issued security advisories and updates (gstreamer1-plugins-ugly-free-1.26.7-2.el10_2.1) to fix this issue.

Exploitation of this vulnerability can cause denial of service via application crashes and may result in limited information disclosure through incorporation of out-of-bounds bytes into stream metadata. The CVSS v3.1 base score is 7.1 (High), reflecting network attack vector, low attack complexity, no privileges required, user interaction required, unchanged scope, low confidentiality impact, no integrity impact, and high availability impact.

Red Hat has released official security updates for the gstreamer1-plugins-ugly-free package to address this vulnerability. Users should apply the updates provided in Red Hat Enterprise Linux 10 and 10.2 as detailed in Red Hat advisory RHSA-2026:36673. For update instructions, refer to https://access.redhat.com/articles/11258. No additional mitigation actions are required beyond applying the official patches.