{"id":"AZL-113353","summary":"CVE-2026-125712 affecting package gstreamer1-plugins-base 1.20.0-3","details":"A flaw was found in GStreamer's gst-plugins-base RTCP SDES packet parser. A remote sender able to reach an active media session can supply a malformed SDES entry whose declared length exceeds the received packet. Missing bounds validation can cause the receiver to read beyond the packet buffer, potentially crashing the application or exposing a limited amount of process memory.","modified":"2026-11-14T05:28:08Z","published":"2026-11-10T12:17:18Z","upstream":["CVE-2026-125712"],"references":[{"type":"WEB","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-125712"}],"affected":[{"package":{"name":"gstreamer1-plugins-base","ecosystem":"Azure Linux:3","purl":"pkg:rpm/azure-linux/gstreamer1-plugins-base"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"last_affected":"1.20.0-3"}]}],"database_specific":{"source":"https://github.com/microsoft/AzureLinuxVulnerabilityData/blob/main/osv/AZL-113353.json"}}],"schema_version":"1.9.2"}