A use-after-free vulnerability exists in GStreamer's core buffer value deserialization when processing serialized buffer data containing invalid characters. This flaw can cause applications parsing untrusted caps or structure data to crash. Network-facing GStreamer Data Protocol receivers may process such data without user interaction, potentially leading to denial of service. No further impact such as code execution has been established.