Summary
[1.16.1-8.0.1]
- Update origin URL [Orabug: 36209826]
[1.16.1-8]
- Fix for CVE-2026-52720: librfb framebuffer update rectangle
validation
Resolves: RHEL-184455
[1.16.1-7]
- Fix integer overflow in vmncdec (CVE-2026-52722)
Resolves: RHEL-184414
Fixed packages 2
| Release | Package | Fixed in |
|---|---|---|
| Oracle Linux · 8 | gstreamer1-plugins-bad-free | 0:1.16.1-8.0.1.el8_10 |
| Oracle Linux · 8 | gstreamer1-plugins-bad-free-devel | 0:1.16.1-8.0.1.el8_10 |
Vulnerabilities 2
-
High 8.8
Gstreamer1-plugins-bad-free: gstreamer: heap buffer overflow via crafted vnc server rectangle in librfb
A heap buffer overflow vulnerability was found in GStreamer's librfb (RFB/VNC client). The rectangle bounds check incorrectly validates area rather than individual dimensions, allowing a malicious VNC server to send a rectangle that extends beyond the framebu…
-
High 7.1
Gstreamer1-plugins-bad-free: gstreamer: signed integer overflow in vmnc decoder cursor payload handling
A signed integer overflow vulnerability was found in GStreamer's VMnc decoder. A crafted VMnc stream with large cursor dimensions can overflow signed integer payload-size arithmetic, bypassing a length check and leading to out-of-bounds reads. A remote attack…