Trend Micro's Zero Day Initiative published ZDI-26-775 on Oct 15, 2026 for a heap-based buffer overflow in GStreamer's rtpL16depay RTP payload handler (CVE-2026-111183, CVSS 9.8). A remote attacker who can deliver crafted RTP can overflow a heap buffer and execute code in the process using GStreamer; interaction with the library is required but UI is not. GStreamer landed a fix in commit 80c184b4. Any service that demuxes untrusted RTP/L16 audio (VoIP gateways, media servers, browsers or desktop apps that pull RTP through GStreamer) should rebuild against a patched GStreamer and restart media pipelines. No ITW exploitation is stated in the ZDI advisory.