CVE catalog

CVE-2026-53703

A vulnerability was found in the GStreamer RealMedia demuxer (gst-plugins-ugly). When processing a RealMedia (.rm) file, the demuxer parses MDPR (media properties) chunks to configure audio streams. F

[CVE catalog]

Severity
High · CVSS 7.1CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:H
Published
Source
[NVD] · [CVE record]
EPSS
0.24% · Oct 25, 2026

A vulnerability was found in the GStreamer RealMedia demuxer (gst-plugins-ugly). When processing a RealMedia (.rm) file, the demuxer parses MDPR (media properties) chunks to configure audio streams. For audio stream header versions 4 and 5, the parser reads fields such as codec type, packet size, sample rate, channel count, and extra codec data length from fixed offsets within the chunk without first checking that the chunk contains enough data. If a malicious file provides an MDPR chunk that is too small to contain a complete audio stream header, the parser reads beyond the end of the buffer. This can cause the application to crash. In some cases, bytes read past the buffer boundary may be incorporated into stream metadata, which could result in limited information disclosure.

Vulnerable and fixed packages

Distribution-reported package versions and fixes. These do not depend on matching against the OpenFactory package catalog.

DistributionPackageReleaseVersionStatus
Debiangst-plugins-ugly1.0sid1.28.8-1fixed
Debiangst-plugins-ugly1.0forky1.28.8-1fixed
Debiangst-plugins-ugly1.0trixie1.26.3-4+deb13u1vulnerable
Debiangst-plugins-ugly1.0trixie-security1.26.3-4+deb13u1vulnerable
Debiangst-plugins-ugly1.0bookworm1.22.0-2+deb12u2vulnerable
Debiangst-plugins-ugly1.0bookworm-security1.22.0-2+deb12u2vulnerable
Cpegst-plugins-ugly1.0Not reportedNot reportedvulnerable
Ubuntugst-plugins-ugly1.0noble1.24.1-1ubuntu0.1~esm1fixed
Ubuntugstreamer1.0-plugins-uglynoble1.24.1-1ubuntu0.1~esm1fixed
Ubuntugst-plugins-ugly1.0pro1.26.6-1vulnerable
Ubuntugst-plugins-ugly1.0pro1.26.7-1build1vulnerable
Ubuntugst-plugins-ugly1.0pro1.27.2-1vulnerable
Ubuntugst-plugins-ugly1.0pro1.27.90-1vulnerable
Ubuntugst-plugins-ugly1.0pro1.28.0-1vulnerable
Ubuntugst-plugins-ugly1.0pro1.28.1-1vulnerable
Ubuntugst-plugins-ugly1.0pro1.28.2-1vulnerable
Ubuntugst-plugins-ugly1.0pro1.28.2-1ubuntu0.1~esm1fixed
Ubuntugst-plugins-ugly1.025.101.26.0-1vulnerable
Ubuntugst-plugins-ugly1.025.101.26.1-1vulnerable
Ubuntugst-plugins-ugly1.025.101.26.2-1vulnerable
Ubuntugst-plugins-ugly1.025.101.26.3-1vulnerable
Ubuntugst-plugins-ugly1.025.101.26.3-3vulnerable
Ubuntugst-plugins-ugly1.025.101.26.3-4vulnerable
Ubuntugst-plugins-ugly1.025.101.26.4-1vulnerable
Ubuntugst-plugins-ugly1.025.101.26.5-1vulnerable
Ubuntugst-plugins-ugly1.025.101.26.6-1vulnerable

Fixed-version evidence

DistributionPackageTypeReleaseFixed versionUrgencyOriginBugs
Debiangst-plugins-ugly1.0sourcesid1.28.4-1not yet assignedNot reportedNot reported
Debiangst-plugins-ugly1.0sourceforky1.28.4-1not yet assignedNot reportedNot reported
Debiangst-plugins-ugly1.0sourcetrixie(unfixed)not yet assignedNot reportedNot reported
Debiangst-plugins-ugly1.0sourcebookworm(unfixed)not yet assignedNot reportedNot reported
Ubuntugst-plugins-ugly1.0debnoble1.24.1-1ubuntu0.1~esm1Not reportedNot reportedNot reported
Ubuntugstreamer1.0-plugins-uglydebnoble1.24.1-1ubuntu0.1~esm1Not reportedNot reportedNot reported
Ubuntugst-plugins-ugly1.0debpro1.28.2-1ubuntu0.1~esm1Not reportedUBUNTU-CVE-2026-53703Not reported

Notes

[trixie] gst-plugins-ugly1.0: Minor issue [bookworm] gst-plugins-ugly1.0: Minor issue, OOB read

OpenFactory catalog packages

[Debian 12 (Bookworm)]

  • [gstreamer1.0-plugins-ugly]Affected

    Source package: [gst-plugins-ugly1.0]

    Details (4)

    • 1.22.0-2+deb12u2 · amd64 · bookworm

      Affected

      nvd · gst-plugins-ugly1.0 · debian · bookworm; nvd · gst-plugins-ugly1.0 · debian · 12

    • 1.22.0-2+deb12u2 · arm64 · bookworm

      Affected

      nvd · gst-plugins-ugly1.0 · debian · bookworm; nvd · gst-plugins-ugly1.0 · debian · 12

    • 1.22.0-2+deb12u2 · amd64 · bookworm-security

      Affected

      nvd · gst-plugins-ugly1.0 · debian · bookworm; nvd · gst-plugins-ugly1.0 · debian · 12

    • 1.22.0-2+deb12u2 · arm64 · bookworm-security

      Affected

      nvd · gst-plugins-ugly1.0 · debian · bookworm; nvd · gst-plugins-ugly1.0 · debian · 12

[Debian 13 (Trixie)]

  • [gstreamer1.0-plugins-ugly]Affected

    Source package: [gst-plugins-ugly1.0]

    Details (4)

    • 1.26.3-4+deb13u1 · amd64 · trixie

      Affected

      nvd · gst-plugins-ugly1.0 · debian · 13

    • 1.26.3-4+deb13u1 · arm64 · trixie

      Affected

      nvd · gst-plugins-ugly1.0 · debian · 13

    • 1.26.3-4+deb13u1 · amd64 · trixie-security

      Affected

      nvd · gst-plugins-ugly1.0 · debian · 13

    • 1.26.3-4+deb13u1 · arm64 · trixie-security

      Affected

      nvd · gst-plugins-ugly1.0 · debian · 13

Observed:

References

[CERT-Bund public advisories] · [Debian Security Tracker] · [FIRST EPSS] · [National Vulnerability Database (NVD)] · [OSV Package Vulnerability Database] · [Red Hat security advisories and VEX] · [SUSE security advisories and VEX] · [Ubuntu Security Notices (USN)]