A flaw was found in the GStreamer gst-plugins-good package. The rtph264depay and rtph265depay RTP depayloader elements do not enforce a maximum size limit on the reassembly buffer used during fragmented RTP packet processing. A remote, unauthenticated attacker can send a continuous stream of RTP fragments without ever transmitting an end-of-fragment marker, causing the reassembly buffer to grow without bound until process memory is exhausted. This results in a denial of service through process termination.
References
Configurations
No configuration.
History
23 Sep 2026, 15:17
| Type | Values Removed | Values Added |
|---|---|---|
| References |
|
23 Sep 2026, 07:16
| Type | Values Removed | Values Added |
|---|---|---|
| References |
|
22 Sep 2026, 16:17
| Type | Values Removed | Values Added |
|---|---|---|
| References |
|
21 Sep 2026, 08:16
| Type | Values Removed | Values Added |
|---|---|---|
| References |
|
17 Sep 2026, 18:16
| Type | Values Removed | Values Added |
|---|---|---|
| References |
|
|
Information
Published : 2026-08-06 08:16
Updated : 2026-09-23 15:17
NVD link : CVE-2026-18649
Mitre link : CVE-2026-18649
CVE.ORG link : CVE-2026-18649
JSON object : View
Products Affected
No product.
CWE
CWE-770
Allocation of Resources Without Limits or Throttling