CVE-2026-18299

Name of the Vulnerable Software and Affected Versions GStreamer (affected versions not specified)

Description A Use-After-Free flaw exists in the rtpsbcdepay element during the processing of RTP payload elements. The issue occurs because the software fails to validate the existence of an object before performing operations on it, which can allow a remote attacker to execute arbitrary code in the context of the current process. Exploitation requires interaction with the library, though attack vectors may vary by implementation.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.