CVE-2026-14935
LowCVSS 3.7Exploitation Probability (EPSS)
Low risk5th percentile - higher than 5% of all known CVEs
Summary
A logic vulnerability was found in GStreamer's webrtcbin component. The _check_sdp_crypto() function has an inverted boolean condition, accepting SDP offers without the required a=fingerprint attribute and rejecting those with it. An attacker can manipulate WebRTC signaling to bypass DTLS certificate fingerprint binding.
Risk Assessment
An attacker can perform a man-in-the-middle attack on media streams, impersonating a trusted WebRTC participant. This allows interception or modification of audio and video without detection.
Recommendation
Update GStreamer to a patched version addressing CVE-2026-14935 immediately. Until then, monitor WebRTC traffic and enforce additional signaling authentication mechanisms.
Original NVD description (English source)
A logic vulnerability was found in GStreamer's webrtcbin component. The _check_sdp_crypto() function contains an inverted boolean condition that causes it to accept remote SDP offers or answers that lack the required a=fingerprint attribute, while incorrectly rejecting those that include it. An attacker with the ability to intercept and modify WebRTC signaling messages could exploit this to bypass the SDP-level DTLS certificate fingerprint binding, weakening defenses against man-in-the-middle attacks on media streams.