CVE-2026-85150: NULL Pointer Dereference in Red Hat Red Hat Enterprise Linux 10
Description
A NULL pointer dereference flaw was found in GStreamer's RTSP support library. The vulnerability occurs while parsing an Authorization or WWW-Authenticate header that uses Digest authentication. Specially crafted whitespace placement around a parameter's terminator can cause an internal length calculation to underflow, leading to a crash of the process parsing the header. On an RTSP server this can be triggered by a remote, unauthenticated attacker sending a single malformed request when the server has authentication enabled; the same flaw can also be triggered against an RTSP client by a malicious or compromised RTSP server. Successful exploitation results in a denial of service (application crash) and has no confirmed impact on confidentiality or integrity.
CVSS v3.1
Score 7.5high
Affected software
Red Hat
Red Hat Enterprise Linux 10
Red Hat
Red Hat Enterprise Linux 8
Red Hat
Red Hat Enterprise Linux 9
Red Hat
Red Hat Enterprise Linux 7
AI-Powered Analysis
Machine-generated threat intelligence
Technical Analysis
CVE-2026-85150 is a NULL pointer dereference vulnerability in the GStreamer RTSP support library affecting Red Hat Enterprise Linux 10. The issue arises during parsing of Authorization or WWW-Authenticate headers using Digest authentication. Malformed whitespace placement around a parameter terminator causes an internal length calculation to underflow, leading to a crash of the parsing process. On RTSP servers with authentication enabled, a remote unauthenticated attacker can trigger this by sending a single malformed request. RTSP clients are also vulnerable when connecting to malicious or compromised RTSP servers. The vulnerability causes denial of service (application crash) but does not affect confidentiality or integrity. Red Hat is still mapping affected components and has not provided a patch or mitigation that meets their standards.
Potential Impact
Successful exploitation causes denial of service by crashing the RTSP server or client process. There is no confirmed impact on confidentiality or integrity. The vulnerability can be triggered remotely without authentication on servers with authentication enabled, or by malicious servers against clients.
Mitigation Recommendations
Red Hat has stated that no mitigation is currently available that meets their standards for usability, deployment, applicability, or stability. Administrators should monitor Red Hat advisories for updates. RTSP servers without authentication configured are not vulnerable to the server-side attack path. Avoid connecting RTSP clients to untrusted servers if possible until a fix is available.
Technical Details
- Data Version
- 5.2
- Assigner Short Name
- redhat
- Date Reserved
- 2026-09-03T10:21:17.760Z
- Cvss Version
- 3.1
- State
- PUBLISHED
- Vendor Advisory Urls
- [{"url":"https://access.redhat.com/security/cve/CVE-2026-85150","vendor":"Red Hat"}]
Threat ID: 6a99517dacd9273b49d08226
Added to database: 09/03/2026, 10:52:45 UTC
Last enriched: 09/22/2026, 02:25:33 UTC
Last updated: 10/18/2026, 06:48:20 UTC
Views: 82
Community Reviews
0 reviewsCrowdsource mitigation strategies, share intel context, and vote on the most helpful responses. Sign in to add your voice and help keep defenders ahead.
Want to contribute mitigation steps or threat intel context? Sign in or create an account to join the community discussion.
Actions
Updates to AI analysis require Pro Console access. Upgrade inside Console → Billing.
Need more coverage?
Upgrade to Pro Console for AI refresh and higher limits.
For incident response and remediation, OffSeq services can help resolve threats faster.
Latest Threats
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.