Skip to content

CVE-2026-52721 on CTRL-OS 26.05

Aliases: CVE-2026-52721

Packages: gst_all_1.gst-plugins-bad

Status: Plausible

Advisory Information

Multiple out-of-bounds read vulnerabilities were found in GStreamer's pcapparse element. Malformed PCAP records can trigger reads beyond buffer boundaries during IPv4/TCP header parsing. This element is primarily used in debugging pipelines, limiting real-world exposure. A local attacker could trick a user into processing a specially crafted PCAP file, potentially leading to a crash or information disclosure.

Updates

2026-07-10 01:23 CEST

Metadata changes:

  • Status for package gst_all_1.gst-plugins-bad: “Plausible”

2026-07-06 23:08 CEST

Metadata changes:

  • Status for package gst_all_1.gst-plugins-bad: “New”

(Amended on: 2026-07-06 23:09 CEST)