CVE-2026-18649: Unbounded Memory Growth
GStreamer RTP Depayloader
Assigned CVE A remote, unauthenticated denial of service in GStreamer's H.264 and H.265 RTP depayloaders, where FU-A fragment reassembly had no size limit. Assigned CVE-2026-18649.
CVE-2026-18649
GStreamer RTP Memory Safety DoS