CVE-2026-18296

A flaw was found in GStreamer. A remote attacker could exploit a heap-based buffer overflow vulnerability when parsing specially crafted MRF (Multimedia Research Forum) files. This vulnerability arises from insufficient validation of user-supplied data length before copying it to a heap-based buffer. Successful exploitation requires user interaction, such as visiting a malicious page or opening a malicious file, and could lead to arbitrary code execution in the context of the current process.

This vulnerability is rated as an Important severity flaw because an attacker can achieve arbitrary code execution within the user's execution context, though exploitation requires tricking a local user into opening an untrusted media file. In Red Hat Enterprise Linux, GStreamer plugins are included in desktop environments and multimedia pipelines to handle audio and video formats. While the flaw cannot be exploited without user interaction, any application decoding untrusted MRF files inherits this vulnerability, potentially compromising the application's security boundary.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.

To mitigate this issue, users should avoid opening or processing untrusted Multimedia Research Forum (MRF) files. Exercise caution when interacting with untrusted web content that may attempt to deliver malicious MRF files, as user interaction is required for exploitation.