GStreamer is vulnerable to an out‑of‑bounds write in the MRF file parser. The flaw arises because the parser does not properly validate user‑supplied data, allowing an attacker to write data past the end of a buffer. This can lead to arbitrary code execution in the context of the process that parses the file.

The vulnerability affects all GStreamer installations that support MRF files. No specific product or version ranges are disclosed, so any system running an affected version of GStreamer can be compromised. Systems with the MRF plugin enabled are at greatest risk.

The CVSS score is 8.8, indicating high risk. The EPSS score is < 1%, suggesting a low probability of exploitation, and the issue is not listed in the KEV catalog. Exploitation requires user interaction – the target must open a malicious MRF file or visit a page that triggers parsing. While the attack surface is limited to individuals who inadvertently expose the system to a malicious file or web page, the ability to execute arbitrary code makes the risk significant for environments where users view untrusted content.