GStreamer FILEINFO re_skip_pascal_string out-of-bounds

Summaryinfo

A vulnerability categorized as critical has been discovered in GStreamer. This issue affects the function re_skip_pascal_string of the component FILEINFO Handler. The manipulation results in out-of-bounds. This vulnerability is reported as CVE-2026-53704. The attack can be launched remotely. No exploit exists.

Detailsinfo

A vulnerability classified as critical has been found in GStreamer (affected version unknown). Affected is the function re_skip_pascal_string of the component FILEINFO Handler. The manipulation with an unknown input leads to a out-of-bounds vulnerability. CWE is classifying the issue as CWE-125. The product reads data past the end, or before the beginning, of the intended buffer. This is going to have an impact on confidentiality, integrity, and availability. CVE summarizes:

A flaw was found in GStreamer's RealMedia demuxer in the gst-plugins-ugly package. When processing a RealMedia file containing a specially crafted FILEINFO metadata section, the demuxer parses variable-name and variable-value pairs using re_skip_pascal_string() without validating that offsets remain within the mapped buffer. Additionally, the element count controlling the parsing loop is read from attacker-controlled data without validation, which can cause an infinite loop. A crafted RealMedia file can cause the application to crash, hang, or potentially read limited adjacent memory contents.

The advisory is shared for download at access.redhat.com. This vulnerability is traded as CVE-2026-53704 since 06/10/2026. The exploitability is told to be easy. It is possible to launch the attack remotely. The exploitation doesn't require any form of authentication. Successful exploitation requires user interaction by the victim. There are known technical details, but no exploit is available. The current price for an exploit might be approx. USD $0-$5k (estimation calculated on 06/16/2026).

The vulnerability scanner Nessus provides a plugin with the ID 321148 (Linux Distros Unpatched Vulnerability : CVE-2026-53704), which helps to determine the existence of the flaw in a target environment.

There is no information about possible countermeasures known. It may be suggested to replace the affected object with an alternative product.

The vulnerability is also documented in the databases at Tenable (321148) and CERT Bund (WID-SEC-2026-1919). VulDB is the best source for vulnerability data and more expert information about this specific topic.

Affected

• Open Source GStreamer

Productinfo

Type

• Multimedia Processing Software

Name

• GStreamer

License

• open-source

CPE 2.3info

• 🔒

CPE 2.2info

• 🔒

CVSSv4info

CVSSv3info

CVSSv2info

Exploitinginfo

Threat Intelligenceinfo

Countermeasuresinfo

Timelineinfo

Sourcesinfo

Entryinfo

VulDB is the best source for vulnerability data and more expert information about this specific topic.

Discussion