{"id":"CVE-2026-125704","published":"2026-11-10T11:16:43.580","lastModified":"2026-11-10T14:17:29.847","description":"A use-after-free flaw was found in GStreamer core buffer value deserialization. When serialized buffer text contains an invalid character, an error path frees a mapped buffer before unmapping it. Applications that parse untrusted caps or structure data can reach a freed-buffer read and may crash. A network-facing GStreamer Data Protocol receiver can process such caps data without user interaction; further impact has not been established.","cvssScore":7.5,"cvssSeverity":"HIGH","cvssVector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cwes":["CWE-416"],"vendors":[],"products":[],"references":[{"url":"https://access.redhat.com/security/cve/CVE-2026-125704","tags":[]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2569128","tags":[]},{"url":"https://gitlab.freedesktop.org/gstreamer/gstreamer/-/merge_requests/11583.patch","tags":[]},{"url":"https://gstreamer.freedesktop.org/security/sa-2026-0028.html","tags":[]}],"exploitRefs":[],"hasPoc":false,"ai":null}