This vulnerability exists in the RealMedia demuxer of GStreamer's gst-plugins-ugly package on Red Hat Enterprise Linux 10. The flaw arises because the demuxer uses the function re_skip_pascal_string() to parse variable-name and variable-value pairs from a FILEINFO metadata section without validating that offsets remain within the mapped buffer. Furthermore, the element count controlling the parsing loop is read from attacker-controlled data without validation, potentially causing an infinite loop. A specially crafted RealMedia file can trigger out-of-bounds reads, causing the application to crash, hang indefinitely, or possibly leak limited adjacent memory contents. The CVSS 3.1 base score is 7.1 (High), reflecting network attack vector, low attack complexity, no privileges required, user interaction required, unchanged scope, limited confidentiality impact, no integrity impact, and high availability impact. No official patch or remediation level is stated in the vendor advisory as of the publication date. The vendor advisory link is provided for updates.

Successful exploitation can cause denial of service through application crashes or hangs. There is also potential for limited disclosure of adjacent memory contents due to out-of-bounds reads. The confidentiality impact is limited, integrity is not affected, and availability impact is high. No known exploits in the wild have been reported at this time.

Patch status is not yet confirmed — check the Red Hat advisory at https://access.redhat.com/security/cve/CVE-2026-53704 for current remediation guidance. Until a fix is available, avoid processing untrusted RealMedia files with the affected GStreamer component. Monitor Red Hat advisories for updates on patches or workarounds.