← All credits

Upstream acknowledges Roy Lau (Independent researcher) as the original reporter.

1 vulnerability record and advisories credit this contributor.

CVE-2026-85150
Gstreamer1-plugins-base: gstreamer: null/invalid-pointer dereference in gst_rtsp_message_parse_auth_credentials() when parsing a crafted digest authorization/www-authenticate header