CVE-2026-14935

EUVD-2026-42051

07.07.2026, 16:16

A logic vulnerability was found in GStreamer's webrtcbin component. The _check_sdp_crypto() function contains an inverted boolean condition that causes it to accept remote SDP offers or answers that lack the required a=fingerprint attribute, while incorrectly rejecting those that include it. An attacker with the ability to intercept and modify WebRTC signaling messages could exploit this to bypass the SDP-level DTLS certificate fingerprint binding, weakening defenses against man-in-the-middle attacks on media streams.

Provider	Type	Base Score	Atk. Vector	Atk. Complexity	Priv. Required	Vector
NIST	Primary	3.7 LOW	NETWORK	HIGH	NONE	CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N

Awaiting analysis

This vulnerability is currently awaiting analysis.

Base Score

CVSS 3.x

EPSS Score

Percentile: 4.76%

Debian Releases

Debian Product

Codename

gst-plugins-bad1.0

bookworm	vulnerable
bookworm (security)	vulnerable
bullseye	vulnerable
bullseye (security)	vulnerable
forky	1.28.6-1 fixed
sid	1.28.6-1 fixed
trixie	no-dsa
trixie (security)	vulnerable

Ubuntu Releases

Ubuntu Product

Codename

gst-plugins-bad1.0

bionic	needs-triage
focal	needs-triage
jammy	needs-triage
noble	needs-triage
questing	ignored
resolute	needs-triage
trusty	needs-triage

openSUSE / SLES Releases

openSUSE Product

Release

gstreamer-plugins-bad

suse enterprise desktop 15 SP7	1.24.0-150600.4.9.1 fixed
suse enterprise sap 15 SP7	1.24.0-150600.4.9.1 fixed
suse enterprise server 15 SP4	1.20.1-150400.3.29.1 fixed
suse enterprise server 15 SP5	1.22.0-150500.3.34.1 fixed
suse enterprise server 15 SP6	1.24.0-150600.4.9.1 fixed
suse enterprise server 15 SP7	1.24.0-150600.4.9.1 fixed

gstreamer-plugins-bad-chromaprint

suse enterprise server 15 SP4	1.20.1-150400.3.29.1 fixed
suse enterprise server 15 SP5	1.22.0-150500.3.34.1 fixed

gstreamer-plugins-bad-devel

suse enterprise desktop 15 SP7	1.24.0-150600.4.9.1 fixed
suse enterprise sap 15 SP7	1.24.0-150600.4.9.1 fixed
suse enterprise server 15 SP4	1.20.1-150400.3.29.1 fixed
suse enterprise server 15 SP5	1.22.0-150500.3.34.1 fixed
suse enterprise server 15 SP6	1.24.0-150600.4.9.1 fixed
suse enterprise server 15 SP7	1.24.0-150600.4.9.1 fixed

gstreamer-plugins-bad-lang

suse enterprise desktop 15 SP7	1.24.0-150600.4.9.1 fixed
suse enterprise sap 15 SP7	1.24.0-150600.4.9.1 fixed
suse enterprise server 15 SP4	1.20.1-150400.3.29.1 fixed
suse enterprise server 15 SP5	1.22.0-150500.3.34.1 fixed
suse enterprise server 15 SP6	1.24.0-150600.4.9.1 fixed
suse enterprise server 15 SP7	1.24.0-150600.4.9.1 fixed

libgstadaptivedemux-1_0-0

suse enterprise desktop 15 SP7	1.24.0-150600.4.9.1 fixed
suse enterprise sap 15 SP7	1.24.0-150600.4.9.1 fixed
suse enterprise server 15 SP4	1.20.1-150400.3.29.1 fixed
suse enterprise server 15 SP5	1.22.0-150500.3.34.1 fixed
suse enterprise server 15 SP6	1.24.0-150600.4.9.1 fixed
suse enterprise server 15 SP7	1.24.0-150600.4.9.1 fixed

libgstanalytics-1_0-0

suse enterprise desktop 15 SP7	1.24.0-150600.4.9.1 fixed
suse enterprise sap 15 SP7	1.24.0-150600.4.9.1 fixed
suse enterprise server 15 SP6	1.24.0-150600.4.9.1 fixed
suse enterprise server 15 SP7	1.24.0-150600.4.9.1 fixed

libgstbadaudio-1_0-0

suse enterprise desktop 15 SP7	1.24.0-150600.4.9.1 fixed
suse enterprise sap 15 SP7	1.24.0-150600.4.9.1 fixed
suse enterprise server 15 SP4	1.20.1-150400.3.29.1 fixed
suse enterprise server 15 SP5	1.22.0-150500.3.34.1 fixed
suse enterprise server 15 SP6	1.24.0-150600.4.9.1 fixed
suse enterprise server 15 SP7	1.24.0-150600.4.9.1 fixed

libgstbasecamerabinsrc-1_0-0

suse enterprise desktop 15 SP7	1.24.0-150600.4.9.1 fixed
suse enterprise sap 15 SP7	1.24.0-150600.4.9.1 fixed
suse enterprise server 15 SP4	1.20.1-150400.3.29.1 fixed
suse enterprise server 15 SP5	1.22.0-150500.3.34.1 fixed
suse enterprise server 15 SP6	1.24.0-150600.4.9.1 fixed
suse enterprise server 15 SP7	1.24.0-150600.4.9.1 fixed

libgstcodecparsers-1_0-0

suse enterprise desktop 15 SP7	1.24.0-150600.4.9.1 fixed
suse enterprise sap 15 SP7	1.24.0-150600.4.9.1 fixed
suse enterprise server 15 SP4	1.20.1-150400.3.29.1 fixed
suse enterprise server 15 SP5	1.22.0-150500.3.34.1 fixed
suse enterprise server 15 SP6	1.24.0-150600.4.9.1 fixed
suse enterprise server 15 SP7	1.24.0-150600.4.9.1 fixed

libgstcodecs-1_0-0

suse enterprise desktop 15 SP7	1.24.0-150600.4.9.1 fixed
suse enterprise sap 15 SP7	1.24.0-150600.4.9.1 fixed
suse enterprise server 15 SP4	1.20.1-150400.3.29.1 fixed
suse enterprise server 15 SP5	1.22.0-150500.3.34.1 fixed
suse enterprise server 15 SP6	1.24.0-150600.4.9.1 fixed
suse enterprise server 15 SP7	1.24.0-150600.4.9.1 fixed

libgstcuda-1_0-0

suse enterprise desktop 15 SP7	1.24.0-150600.4.9.1 fixed
suse enterprise sap 15 SP7	1.24.0-150600.4.9.1 fixed
suse enterprise server 15 SP5	1.22.0-150500.3.34.1 fixed
suse enterprise server 15 SP6	1.24.0-150600.4.9.1 fixed
suse enterprise server 15 SP7	1.24.0-150600.4.9.1 fixed

libgstdxva-1_0-0

suse enterprise desktop 15 SP7	1.24.0-150600.4.9.1 fixed
suse enterprise sap 15 SP7	1.24.0-150600.4.9.1 fixed
suse enterprise server 15 SP6	1.24.0-150600.4.9.1 fixed
suse enterprise server 15 SP7	1.24.0-150600.4.9.1 fixed

libgstinsertbin-1_0-0

suse enterprise desktop 15 SP7	1.24.0-150600.4.9.1 fixed
suse enterprise sap 15 SP7	1.24.0-150600.4.9.1 fixed
suse enterprise server 15 SP4	1.20.1-150400.3.29.1 fixed
suse enterprise server 15 SP5	1.22.0-150500.3.34.1 fixed
suse enterprise server 15 SP6	1.24.0-150600.4.9.1 fixed
suse enterprise server 15 SP7	1.24.0-150600.4.9.1 fixed

libgstisoff-1_0-0

suse enterprise desktop 15 SP7	1.24.0-150600.4.9.1 fixed
suse enterprise sap 15 SP7	1.24.0-150600.4.9.1 fixed
suse enterprise server 15 SP4	1.20.1-150400.3.29.1 fixed
suse enterprise server 15 SP5	1.22.0-150500.3.34.1 fixed
suse enterprise server 15 SP6	1.24.0-150600.4.9.1 fixed
suse enterprise server 15 SP7	1.24.0-150600.4.9.1 fixed

libgstmpegts-1_0-0

suse enterprise desktop 15 SP7	1.24.0-150600.4.9.1 fixed
suse enterprise sap 15 SP7	1.24.0-150600.4.9.1 fixed
suse enterprise server 15 SP4	1.20.1-150400.3.29.1 fixed
suse enterprise server 15 SP5	1.22.0-150500.3.34.1 fixed
suse enterprise server 15 SP6	1.24.0-150600.4.9.1 fixed
suse enterprise server 15 SP7	1.24.0-150600.4.9.1 fixed

libgstmse-1_0-0

suse enterprise desktop 15 SP7	1.24.0-150600.4.9.1 fixed
suse enterprise sap 15 SP7	1.24.0-150600.4.9.1 fixed
suse enterprise server 15 SP6	1.24.0-150600.4.9.1 fixed
suse enterprise server 15 SP7	1.24.0-150600.4.9.1 fixed

libgstphotography-1_0-0

suse enterprise desktop 15 SP7	1.24.0-150600.4.9.1 fixed
suse enterprise sap 15 SP7	1.24.0-150600.4.9.1 fixed
suse enterprise server 15 SP4	1.20.1-150400.3.29.1 fixed
suse enterprise server 15 SP5	1.22.0-150500.3.34.1 fixed
suse enterprise server 15 SP6	1.24.0-150600.4.9.1 fixed
suse enterprise server 15 SP7	1.24.0-150600.4.9.1 fixed

libgstplay-1_0-0

suse enterprise desktop 15 SP7	1.24.0-150600.4.9.1 fixed
suse enterprise sap 15 SP7	1.24.0-150600.4.9.1 fixed
suse enterprise server 15 SP4	1.20.1-150400.3.29.1 fixed
suse enterprise server 15 SP5	1.22.0-150500.3.34.1 fixed
suse enterprise server 15 SP6	1.24.0-150600.4.9.1 fixed
suse enterprise server 15 SP7	1.24.0-150600.4.9.1 fixed

libgstplayer-1_0-0

suse enterprise desktop 15 SP7	1.24.0-150600.4.9.1 fixed
suse enterprise sap 15 SP7	1.24.0-150600.4.9.1 fixed
suse enterprise server 15 SP4	1.20.1-150400.3.29.1 fixed
suse enterprise server 15 SP5	1.22.0-150500.3.34.1 fixed
suse enterprise server 15 SP6	1.24.0-150600.4.9.1 fixed
suse enterprise server 15 SP7	1.24.0-150600.4.9.1 fixed

libgstsctp-1_0-0

suse enterprise desktop 15 SP7	1.24.0-150600.4.9.1 fixed
suse enterprise sap 15 SP7	1.24.0-150600.4.9.1 fixed
suse enterprise server 15 SP4	1.20.1-150400.3.29.1 fixed
suse enterprise server 15 SP5	1.22.0-150500.3.34.1 fixed
suse enterprise server 15 SP6	1.24.0-150600.4.9.1 fixed
suse enterprise server 15 SP7	1.24.0-150600.4.9.1 fixed

libgsttranscoder-1_0-0

suse enterprise desktop 15 SP7	1.24.0-150600.4.9.1 fixed
suse enterprise sap 15 SP7	1.24.0-150600.4.9.1 fixed
suse enterprise server 15 SP5	1.22.0-150500.3.34.1 fixed
suse enterprise server 15 SP6	1.24.0-150600.4.9.1 fixed
suse enterprise server 15 SP7	1.24.0-150600.4.9.1 fixed

libgsturidownloader-1_0-0

suse enterprise desktop 15 SP7	1.24.0-150600.4.9.1 fixed
suse enterprise sap 15 SP7	1.24.0-150600.4.9.1 fixed
suse enterprise server 15 SP4	1.20.1-150400.3.29.1 fixed
suse enterprise server 15 SP5	1.22.0-150500.3.34.1 fixed
suse enterprise server 15 SP6	1.24.0-150600.4.9.1 fixed
suse enterprise server 15 SP7	1.24.0-150600.4.9.1 fixed

libgstva-1_0-0

suse enterprise desktop 15 SP7	1.24.0-150600.4.9.1 fixed
suse enterprise sap 15 SP7	1.24.0-150600.4.9.1 fixed
suse enterprise server 15 SP4	1.20.1-150400.3.29.1 fixed
suse enterprise server 15 SP5	1.22.0-150500.3.34.1 fixed
suse enterprise server 15 SP6	1.24.0-150600.4.9.1 fixed
suse enterprise server 15 SP7	1.24.0-150600.4.9.1 fixed

libgstvulkan-1_0-0

suse enterprise desktop 15 SP7	1.24.0-150600.4.9.1 fixed
suse enterprise sap 15 SP7	1.24.0-150600.4.9.1 fixed
suse enterprise server 15 SP4	1.20.1-150400.3.29.1 fixed
suse enterprise server 15 SP5	1.22.0-150500.3.34.1 fixed
suse enterprise server 15 SP6	1.24.0-150600.4.9.1 fixed
suse enterprise server 15 SP7	1.24.0-150600.4.9.1 fixed

libgstwayland-1_0-0

suse enterprise desktop 15 SP7	1.24.0-150600.4.9.1 fixed
suse enterprise sap 15 SP7	1.24.0-150600.4.9.1 fixed
suse enterprise server 15 SP4	1.20.1-150400.3.29.1 fixed
suse enterprise server 15 SP5	1.22.0-150500.3.34.1 fixed
suse enterprise server 15 SP6	1.24.0-150600.4.9.1 fixed
suse enterprise server 15 SP7	1.24.0-150600.4.9.1 fixed

libgstwebrtc-1_0-0

suse enterprise desktop 15 SP7	1.24.0-150600.4.9.1 fixed
suse enterprise sap 15 SP7	1.24.0-150600.4.9.1 fixed
suse enterprise server 15 SP4	1.20.1-150400.3.29.1 fixed
suse enterprise server 15 SP5	1.22.0-150500.3.34.1 fixed
suse enterprise server 15 SP6	1.24.0-150600.4.9.1 fixed
suse enterprise server 15 SP7	1.24.0-150600.4.9.1 fixed

libgstwebrtcnice-1_0-0

suse enterprise desktop 15 SP7	1.24.0-150600.4.9.1 fixed
suse enterprise sap 15 SP7	1.24.0-150600.4.9.1 fixed
suse enterprise server 15 SP5	1.22.0-150500.3.34.1 fixed
suse enterprise server 15 SP6	1.24.0-150600.4.9.1 fixed
suse enterprise server 15 SP7	1.24.0-150600.4.9.1 fixed

typelib-1_0-CudaGst-1_0

suse enterprise desktop 15 SP7	1.24.0-150600.4.9.1 fixed
suse enterprise sap 15 SP7	1.24.0-150600.4.9.1 fixed
suse enterprise server 15 SP5	1.22.0-150500.3.34.1 fixed
suse enterprise server 15 SP6	1.24.0-150600.4.9.1 fixed
suse enterprise server 15 SP7	1.24.0-150600.4.9.1 fixed

typelib-1_0-GstAnalytics-1_0

suse enterprise desktop 15 SP7	1.24.0-150600.4.9.1 fixed
suse enterprise sap 15 SP7	1.24.0-150600.4.9.1 fixed
suse enterprise server 15 SP6	1.24.0-150600.4.9.1 fixed
suse enterprise server 15 SP7	1.24.0-150600.4.9.1 fixed

typelib-1_0-GstBadAudio-1_0

suse enterprise desktop 15 SP7	1.24.0-150600.4.9.1 fixed
suse enterprise sap 15 SP7	1.24.0-150600.4.9.1 fixed
suse enterprise server 15 SP4	1.20.1-150400.3.29.1 fixed
suse enterprise server 15 SP5	1.22.0-150500.3.34.1 fixed
suse enterprise server 15 SP6	1.24.0-150600.4.9.1 fixed
suse enterprise server 15 SP7	1.24.0-150600.4.9.1 fixed

typelib-1_0-GstCodecs-1_0

suse enterprise desktop 15 SP7	1.24.0-150600.4.9.1 fixed
suse enterprise sap 15 SP7	1.24.0-150600.4.9.1 fixed
suse enterprise server 15 SP4	1.20.1-150400.3.29.1 fixed
suse enterprise server 15 SP5	1.22.0-150500.3.34.1 fixed
suse enterprise server 15 SP6	1.24.0-150600.4.9.1 fixed
suse enterprise server 15 SP7	1.24.0-150600.4.9.1 fixed

typelib-1_0-GstCuda-1_0

suse enterprise desktop 15 SP7	1.24.0-150600.4.9.1 fixed
suse enterprise sap 15 SP7	1.24.0-150600.4.9.1 fixed
suse enterprise server 15 SP5	1.22.0-150500.3.34.1 fixed
suse enterprise server 15 SP6	1.24.0-150600.4.9.1 fixed
suse enterprise server 15 SP7	1.24.0-150600.4.9.1 fixed

typelib-1_0-GstDxva-1_0

suse enterprise desktop 15 SP7	1.24.0-150600.4.9.1 fixed
suse enterprise sap 15 SP7	1.24.0-150600.4.9.1 fixed
suse enterprise server 15 SP6	1.24.0-150600.4.9.1 fixed
suse enterprise server 15 SP7	1.24.0-150600.4.9.1 fixed

typelib-1_0-GstInsertBin-1_0

suse enterprise desktop 15 SP7	1.24.0-150600.4.9.1 fixed
suse enterprise sap 15 SP7	1.24.0-150600.4.9.1 fixed
suse enterprise server 15 SP4	1.20.1-150400.3.29.1 fixed
suse enterprise server 15 SP5	1.22.0-150500.3.34.1 fixed
suse enterprise server 15 SP6	1.24.0-150600.4.9.1 fixed
suse enterprise server 15 SP7	1.24.0-150600.4.9.1 fixed

typelib-1_0-GstMpegts-1_0

suse enterprise desktop 15 SP7	1.24.0-150600.4.9.1 fixed
suse enterprise sap 15 SP7	1.24.0-150600.4.9.1 fixed
suse enterprise server 15 SP4	1.20.1-150400.3.29.1 fixed
suse enterprise server 15 SP5	1.22.0-150500.3.34.1 fixed
suse enterprise server 15 SP6	1.24.0-150600.4.9.1 fixed
suse enterprise server 15 SP7	1.24.0-150600.4.9.1 fixed

typelib-1_0-GstMse-1_0

suse enterprise desktop 15 SP7	1.24.0-150600.4.9.1 fixed
suse enterprise sap 15 SP7	1.24.0-150600.4.9.1 fixed
suse enterprise server 15 SP6	1.24.0-150600.4.9.1 fixed
suse enterprise server 15 SP7	1.24.0-150600.4.9.1 fixed

typelib-1_0-GstPlay-1_0

suse enterprise desktop 15 SP7	1.24.0-150600.4.9.1 fixed
suse enterprise sap 15 SP7	1.24.0-150600.4.9.1 fixed
suse enterprise server 15 SP4	1.20.1-150400.3.29.1 fixed
suse enterprise server 15 SP5	1.22.0-150500.3.34.1 fixed
suse enterprise server 15 SP6	1.24.0-150600.4.9.1 fixed
suse enterprise server 15 SP7	1.24.0-150600.4.9.1 fixed

typelib-1_0-GstPlayer-1_0

suse enterprise desktop 15 SP7	1.24.0-150600.4.9.1 fixed
suse enterprise sap 15 SP7	1.24.0-150600.4.9.1 fixed
suse enterprise server 15 SP4	1.20.1-150400.3.29.1 fixed
suse enterprise server 15 SP5	1.22.0-150500.3.34.1 fixed
suse enterprise server 15 SP6	1.24.0-150600.4.9.1 fixed
suse enterprise server 15 SP7	1.24.0-150600.4.9.1 fixed

typelib-1_0-GstVa-1_0

suse enterprise desktop 15 SP7	1.24.0-150600.4.9.1 fixed
suse enterprise sap 15 SP7	1.24.0-150600.4.9.1 fixed
suse enterprise server 15 SP5	1.22.0-150500.3.34.1 fixed
suse enterprise server 15 SP6	1.24.0-150600.4.9.1 fixed
suse enterprise server 15 SP7	1.24.0-150600.4.9.1 fixed

typelib-1_0-GstWebRTC-1_0

suse enterprise desktop 15 SP7	1.24.0-150600.4.9.1 fixed
suse enterprise sap 15 SP7	1.24.0-150600.4.9.1 fixed
suse enterprise server 15 SP4	1.20.1-150400.3.29.1 fixed
suse enterprise server 15 SP5	1.22.0-150500.3.34.1 fixed
suse enterprise server 15 SP6	1.24.0-150600.4.9.1 fixed
suse enterprise server 15 SP7	1.24.0-150600.4.9.1 fixed

Common Weakness Enumeration

CWE-670 - Always-Incorrect Control Flow Implementation
The code contains a control flow path that does not reflect the algorithm that the path is intended to implement, leading to incorrect behavior any time this path is navigated.

References

https://access.redhat.com/security/cve/CVE-2026-14935

https://bugzilla.redhat.com/show_bug.cgi?id=2497679

https://gitlab.freedesktop.org/gstreamer/gstreamer-security/-/merge_requests/98

https://gitlab.freedesktop.org/gstreamer/gstreamer/-/work_items/5171