Skip to content
CVE PROGRAM SOURCE RECORD7.5 High

CVE-2026-85150

Gstreamer1-plugins-base: gstreamer: null/invalid-pointer dereference in gst_rtsp_message_parse_auth_credentials() when parsing a crafted digest authorization/www-authenticate header

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
redhat

Description

A NULL pointer dereference flaw was found in GStreamer's RTSP support library. The vulnerability occurs while parsing an Authorization or WWW-Authenticate header that uses Digest authentication. Specially crafted whitespace placement around a parameter's terminator can cause an internal length calculation to underflow, leading to a crash of the process parsing the header. On an RTSP server this can be triggered by a remote, unauthenticated attacker sending a single malformed request when the server has authentication enabled; the same flaw can also be triggered against an RTSP client by a malicious or compromised RTSP server. Successful exploitation results in a denial of service (application crash) and has no confirmed impact on confidentiality or integrity.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Red Hat Red Hat Enterprise Linux 10

Default version status: affected

  • 0:1.26.7-2.el10_2.2 to < *unaffected

Red Hat Red Hat Enterprise Linux 8

Default version status: affected

  • 0:1.16.1-7.el8_10 to < *unaffected

Red Hat Red Hat Enterprise Linux 9

Default version status: affected

  • 0:1.22.12-8.el9_8.2 to < *unaffected

Red Hat Red Hat Enterprise Linux 7

Default version status: affected

References