CVE Feed

    Dashboard / CVE / CVE-2026-59691

    CVE-2026-59691

    A heap buffer overflow vulnerability was found in GStreamer's rfbsrc plugin. When a client connects to a malicious RFB/VNC server that advertises a 16bpp framebuffer and sends Hextile-encoded updates, the Hextile background fill path writes 32-bit pixel values into a buffer allocated for 16-bit pixels. This type mismatch causes an out-of-bounds heap write that can lead to denial of service (process crash) and potential memory corruption.

    Published:Jul 8, 2026
    Last Modified:Sep 10, 2026
    EPS:Jul 9, 2026
    EPSS Score:0.00326
    CVSS Score:7.1

    Affected Products

    Vendor
    Gstreamer
    Product
    Gstreamer
    Vendor
    Redhat
    Product
    Enterprise Linux
    Vendor
    Redhat
    Product
    Enterprise Linux Eus
    Vendor
    Redhat
    Product
    Rhel Aus
    Vendor
    Redhat
    Product
    Rhel E4s
    Vendor
    Redhat
    Product
    Rhel Els
    Vendor
    Redhat
    Product
    Rhel Eus
    Vendor
    Redhat
    Product
    Rhel Eus Long Life
    Vendor
    Redhat
    Product
    Rhel Tus

    Exploits

    No exploit reference

    Common Weakness Enumeration

    CWE-787 Out-of-bounds Write

    Common Attack Pattern Enumeration and Classification (CAPEC)

    No CAPEC recorded yet

    Related CVEs

    CVE-2026-18299 (CVSS 7.8) — GStreamer rtpsbcdepay Use-After-Free Remote Code Execution Vulnerability. This vulnerability allows remote att…
    CVE-2026-18298 (CVSS 7.8) — GStreamer PNG File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability …
    CVE-2026-18297 (CVSS 7.8) — GStreamer OGG File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability…
    CVE-2026-18296 (CVSS 7.8) — GStreamer MRF File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability …
    CVE-2026-18295 (CVSS 7.8) — GStreamer MRF File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability. This vulnerability allows …
    CVE-2026-73433 (CVSS 6.6) — A flaw was found in GStreamer gst-plugins-good (avidemux). When parsing FUJIFILM metadata in an AVI strd chunk…
    CVE-2026-73434 (CVSS 6.1) — A flaw was found in GStreamer gst-plugins-good (avidemux). In gst_avi_demux_riff_parse_vprp(), the number of a…
    CVE-2026-5056 (CVSS 7.8) — GStreamer qtdemux Stack-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows r…
    CVE-2026-59692 (CVSS 7.5) — A stack buffer overflow vulnerability was found in GStreamer's DTLS plugin. During a DTLS handshake, the peer …
    CVE-2026-14935 (CVSS 3.7) — A logic vulnerability was found in GStreamer's webrtcbin component. The _check_sdp_crypto() function contains …

    References

    https://access.redhat.com/errata/RHSA-2026:47179
    https://access.redhat.com/errata/RHSA-2026:47180
    https://access.redhat.com/errata/RHSA-2026:47731
    https://access.redhat.com/errata/RHSA-2026:54658
    https://access.redhat.com/errata/RHSA-2026:54659
    https://access.redhat.com/errata/RHSA-2026:54660
    https://access.redhat.com/errata/RHSA-2026:54664
    https://access.redhat.com/errata/RHSA-2026:54665
    https://access.redhat.com/errata/RHSA-2026:54752
    https://access.redhat.com/errata/RHSA-2026:56658
    https://access.redhat.com/errata/RHSA-2026:56772
    https://access.redhat.com/errata/RHSA-2026:62532
    https://access.redhat.com/security/cve/CVE-2026-59691
    https://bugzilla.redhat.com/show_bug.cgi?id=2497343
    https://gitlab.freedesktop.org/gstreamer/gstreamer-security/-/merge_requests/100
    https://gitlab.freedesktop.org/gstreamer/gstreamer/-/work_items/5173

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High