138 matches found
CVE-2026-125712
A flaw was found in GStreamer's gst-plugins-base RTCP SDES packet parser. A remote sender able to reach an active media session can supply a malformed SDES entry whose declared length exceeds the received packet. Missing bounds validation can cause the receiver to read beyond the packet buffer,...
gst-plugins-base: gst-plugins-base: Missing bounds checks in RTCP SDES packet parsing
A flaw was found in GStreamer's gst-plugins-base RTCP SDES packet parser. A remote sender able to reach an active media session can supply a malformed SDES entry whose declared length exceeds the received packet. Missing bounds validation can cause the receiver to read beyond the packet buffer,...
gst-plugins-base: gst-plugins-base: Missing bounds checks in RTCP SDES packet parsing
A flaw was found in GStreamer's gst-plugins-base RTCP SDES packet parser. A remote sender able to reach an active media session can supply a malformed SDES entry whose declared length exceeds the received packet. Missing bounds validation can cause the receiver to read beyond the packet buffer,...
CVE-2026-125712
A flaw was found in GStreamer's gst-plugins-base RTCP SDES packet parser. A remote sender able to reach an active media session can supply a malformed SDES entry whose declared length exceeds the received packet. Missing bounds validation can cause the receiver to read beyond the packet buffer,...
gst-plugins-base: gst-plugins-base: Missing bounds checks in RTCP SDES packet parsing
A flaw was found in GStreamer's gst-plugins-base RTCP SDES packet parser. A remote sender able to reach an active media session can supply a malformed SDES entry whose declared length exceeds the received packet. Missing bounds validation can cause the receiver to read beyond the packet buffer,...
CVE-2026-125712
A flaw was found in GStreamer's gst-plugins-base RTCP SDES packet parser. A remote sender able to reach an active media session can supply a malformed SDES entry whose declared length exceeds the received packet. Missing bounds validation can cause the receiver to read beyond the packet buffer,...
DEBIAN-CVE-2026-125712
A flaw was found in GStreamer's gst-plugins-base RTCP SDES packet parser. A remote sender able to reach an active media session can supply a malformed SDES entry whose declared length exceeds the received packet. Missing bounds validation can cause the receiver to read beyond the packet buffer,...
EUVD-2026-120881
A flaw was found in GStreamer's gst-plugins-base RTCP SDES packet parser. A remote sender able to reach an active media session can supply a malformed SDES entry whose declared length exceeds the received packet. Missing bounds validation can cause the receiver to read beyond the packet buffer,...
CVE-2026-125712 Gst-plugins-base: gst-plugins-base: missing bounds checks in rtcp sdes packet parsing
A flaw was found in GStreamer's gst-plugins-base RTCP SDES packet parser. A remote sender able to reach an active media session can supply a malformed SDES entry whose declared length exceeds the received packet. Missing bounds validation can cause the receiver to read beyond the packet buffer,...
CVE-2026-125712
A flaw was found in GStreamer's gst-plugins-base RTCP SDES packet parser. A remote sender able to reach an active media session can supply a malformed SDES entry whose declared length exceeds the received packet. Missing bounds validation can cause the receiver to read beyond the packet buffer,...
CVE-2026-125712 Gst-plugins-base: gst-plugins-base: missing bounds checks in rtcp sdes packet parsing
A flaw was found in GStreamer's gst-plugins-base RTCP SDES packet parser. A remote sender able to reach an active media session can supply a malformed SDES entry whose declared length exceeds the received packet. Missing bounds validation can cause the receiver to read beyond the packet buffer,...
CVE-2026-125712
A vulnerability exists in GStreamer's gst-plugins-base RTCP SDES packet parser due to missing bounds checks . A remote sender capable of reaching an active media session can provide a malformed SDES entry where the declared length exceeds the actual packet size. This flaw can cause the receiver t...
PT-2026-141582
Name of the Vulnerable Software and Affected Versions GStreamer gst-plugins-base affected versions not specified Description A flaw exists in the RTCP SDES packet parser. A remote sender capable of reaching an active media session can provide a malformed SDES entry with a declared length that...
CVE-2026-125712: Red Hat: A flaw was found in GStreamer's gst-plugins-base RTCP SDES packet parser
A flaw was found in GStreamer's gst-plugins-base RTCP SDES packet parser. A remote sender able to reach an active media session can supply a malformed SDES entry whose declared length exceeds the received packet. Missing bounds validation can cause the receiver to read beyond the packet buffer,...
Linux Distros Unpatched Vulnerability : CVE-2026-125712
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A flaw was found in GStreamer's gst-plugins-base RTCP SDES packet parser. A remote sender able to reach an active media session can supply a malformed SDES entr...
GHSA-H89V-G948-47VP Moleculer: Unauthenticated Denial of Service via negative length field in the TCP transporter packet parser
Summary The TCP transporter's packet parser src/transporters/tcp/parser.js reads the packet length field with Buffer.prototype.readInt32BE, a signed read. A crafted packet whose length field has the sign bit set yields a negative length. The parser then advances past the parsed message with packe...
npm: Moleculer: Unauthenticated Denial of Service via negative length field in the TCP transporter packet parser
npm: Moleculer: Unauthenticated Denial of Service via negative length field in the TCP transporter packet parser vulnerability discovered by ? in WordPress npm moleculer versions 0.14.36...
Moleculer: Unauthenticated Denial of Service via negative length field in the TCP transporter packet parser
Summary The TCP transporter's packet parser src/transporters/tcp/parser.js reads the packet length field with Buffer.prototype.readInt32BE, a signed read. A crafted packet whose length field has the sign bit set yields a negative length. The parser then advances past the parsed message with packe...
CVE-2026-92695
A flaw was found in FastNetMon. When packet capture is enabled, the packet parser fails to properly validate the length of captured network frames before reading header data. A remote attacker can exploit this flaw by sending specially crafted packets with manipulated header lengths, triggering a...
CVE-2026-92693 FastNetMon: IPv6 Fragment header dereferenced without bounds check in shared packet parser
FastNetMon is a high-performance DDoS detector and sensor. In version 1.2.9 and earlier, parserawpackettosimplepacketfull in src/simplepacketparserng.cpp dereferences ipv6extensionheaderfragmentt when IpProtocolNumberIPV6FRAG is present without first verifying that the eight-byte Fragment header...