Vulnerability Spotlight: Denial-of-service vulnerability in GStreamer

Summary: Peter Wang of Cisco ASIG discovered a denial-of-service vulnerability in GStreamer's gst-rtsp-server 1.14.5, where a specially crafted RTSP setup request causes a null pointer dereference. Cisco Talos worked with GStreamer under its coordinated disclosure policy to resolve the issue and make an update available, with Snort rule 53418 covering it.
What's compelling: A single malicious packet to an exposed RTSP server is enough to take it down, so any service built on gst-rtsp-server 1.14.5 carries that availability risk until it is patched.

Read the original at Cisco Talos ↗

Topics: Cloud Security
Related: Google Cloud Warns Three AMD Turin CPU Flaws Could Leak Data Across Processes in VMs Cyber Risks · Nov 12, 2026
New Falcon Cloud Security Innovations Secure the Cloud AI Runs On Cyber Risks · Nov 04, 2026
Cloud-Native Security in 2025: Why Runtime Visibility Must Take Center Stage Cyber Risks ·