CVE-2026-18295

A flaw was found in GStreamer. This out-of-bounds write vulnerability occurs during the parsing of MRF files due to improper validation of user-supplied data. A remote attacker could exploit this by tricking a user into visiting a malicious page or opening a malicious file. Successful exploitation could lead to arbitrary code execution in the context of the current process.

Red Hat rates this vulnerability as having an Important severity because successful exploitation can allow an attacker to achieve arbitrary code execution with the permissions of the logged-in user, though it is constrained by the requirement for user interaction rather than being unauthenticated and network-daemon driven. In typical Red Hat Enterprise Linux environments, GStreamer media libraries are primarily utilized by graphical desktop applications and user-driven media playback tools, meaning headless servers and systems without interactive multimedia workloads have minimal practical exposure. An exploit requires a local user or an automated pipeline to open a specially crafted MRF file, confining the blast radius to the execution context of the processing application.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.

To mitigate this vulnerability, users should avoid opening untrusted MRF files or visiting untrusted web pages that may serve malicious MRF content. This operational control reduces the attack surface by preventing the necessary user interaction for exploitation.