A stack buffer overflow flaw exists in the DTLS plugin of GStreamer. During a DTLS handshake, the plugin prints the peer certificate's Subject Distinguished Name into a fixed 2048-byte buffer on the stack without performing bounds checking. A certificate whose Subject DN exceeds the buffer triggers a stack overflow and crashes the GStreamer process, resulting in a denial of service. The weakness is catalogued as CWE-121.

The flaw affects all Red Hat Enterprise Linux releases 6, 7, 8, 9, and 10 because they ship a GStreamer package that contains the vulnerable DTLS plugin.

The CVSS score of 7.5 indicates high severity. The EPSS score is less than 1%, indicating a very low probability of exploitation, and the vulnerability is not listed in CISA KEV. The flaw can be triggered by an unauthenticated attacker who can reach a DTLS endpoint exposed by the affected GStreamer instance over the network. The attack vector is remote network traffic to the DTLS channel during the handshake.