CVE-2026-53703

🗓️ 15 Jun 2026 19:10:30Reported by redhatType

RealMedia demuxer in GStreamer may read beyond the buffer when parsing media properties, causing crash and disclosure.

Reporter	Title	Published	Views	Family All 5
Circl	CVE-2026-53703	15 Jun 202620:18	–	circl
Cvelist	CVE-2026-53703 Gstreamer1-plugins-ugly-free: gstreamer: out-of-bounds read in realmedia demuxer audio stream header parser	15 Jun 202619:10	–	cvelist
EUVD	EUVD-2026-36801	15 Jun 202621:30	–	euvd
NVD	CVE-2026-53703	15 Jun 202620:16	–	nvd
Positive Technologies	PT-2026-49339	15 Jun 202600:00	–	ptsecurity

[
  {
    "vendor": "Red Hat",
    "product": "Red Hat Enterprise Linux 10",
    "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
    "packageName": "gstreamer1-plugins-ugly-free",
    "defaultStatus": "affected",
    "cpes": [
      "cpe:/o:redhat:enterprise_linux:10"
    ]
  },
  {
    "vendor": "Red Hat",
    "product": "Red Hat Enterprise Linux 7",
    "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
    "packageName": "gstreamer1-plugins-ugly-free",
    "defaultStatus": "affected",
    "cpes": [
      "cpe:/o:redhat:enterprise_linux:7"
    ]
  },
  {
    "vendor": "Red Hat",
    "product": "Red Hat Enterprise Linux 8",
    "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
    "packageName": "gstreamer1-plugins-ugly-free",
    "defaultStatus": "affected",
    "cpes": [
      "cpe:/o:redhat:enterprise_linux:8"
    ]
  },
  {
    "vendor": "Red Hat",
    "product": "Red Hat Enterprise Linux 9",
    "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
    "packageName": "gstreamer1-plugins-ugly-free",
    "defaultStatus": "affected",
    "cpes": [
      "cpe:/o:redhat:enterprise_linux:9"
    ]
  }
]

Source	Link
bugzilla	www.bugzilla.redhat.com/show_bug.cgi
access	www.access.redhat.com/security/cve/CVE-2026-53703

15 Jun 2026 21:09Current

5.5Medium risk

Vulners AI Score5.5

CVSS 3.17.1

CWE-125