CVE-2026-52721
MEDIUM EPSS 1.4%
Published Jun 15, 20262w ago · Modified Jun 17, 20262w ago
5.3 CVSS 3.1
Published Jun 15, 2026 2w ago
Last Modified Jun 17, 2026 2w ago
Description
Multiple out-of-bounds read vulnerabilities were found in GStreamer's pcapparse element. Malformed PCAP records can trigger reads beyond buffer boundaries during IPv4/TCP header parsing. This element is primarily used in debugging pipelines, limiting real-world exposure. A local attacker could trick a user into processing a specially crafted PCAP file, potentially leading to a crash or information disclosure.
CVSS Details
Base Score
Exploitability
Impact
Vector string
CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:H Attack Vector Local
Attack Complexity High
Privileges Required None
User Interaction Required
Scope Unchanged
Confidentiality Low
Integrity None
Availability High
Threat Intelligence
EPSS Exploit Probability
1.4% percentile
Exploit & Patch Status
No Known Exploit
No Patch Available
Weaknesses 1
CWE-125 Out-of-bounds Read Memory Safety
References 3
- access.redhat.com https://access.redhat.com/security/cve/CVE-2026-52721
- bugzilla.redhat.com https://bugzilla.redhat.com/show_bug.cgi?id=2486732
- gitlab.freedesktop.org https://gitlab.freedesktop.org/gstreamer/gstreamer/-/work_items/5106
Remediation
No remediation data recorded yet
Check vendor advisories and the NVD entry for patch availability.