The flaw occurs in gst-plugins-base when a GstVideoMeta structure declares plane strides and offsets that exceed the actual buffer size. During deserialization this information is not range‑checked, and the frame mapping code does not verify that the declared geometry fits within the underlying memory. An attacker who can control the sending side of a GStreamer inter‑process IPC pipeline can supply a crafted buffer that triggers a heap buffer overflow in the receiving process. Successful exploitation can cause a denial of service, and, due to the uncontrolled memory overwrite, may also lead to arbitrary code execution within the victim process.

The vulnerability affects the GStreamer gst‑plugins‑base component on Red Hat Enterprise Linux 6 through 10. No specific upstream version numbers are provided, but any installation of the affected RHEL packages that includes the gst‑plugins‑base library is potentially impacted.

The CVSS score of 8.4 indicates a high severity. The EPSS score of less than 1% suggests that available exploitation is currently rare, and the vulnerability is not listed in the CISA KEV catalog. The attack requires local control of the sending pipeline, typically via the unixfd interface, so the threat is effectively limited to systems where inter‑process video sharing over Unix sockets is enabled. If the unixfd plugin is used, the cross‑process attack path is viable; otherwise the risk is mitigated by disabling that plugin or restricting socket usage to trusted processes.