Summary
[1.26.7-2.5]
- Fix rfbsrc hextile and color read handling for non-32bpp
pixel formats (CVE-2026-59691)
Resolves: RHEL-193550
Fixed packages 3
| Release | Package | Fixed in |
|---|---|---|
| Oracle Linux · 10 | gstreamer1-plugins-bad-free | 0:1.26.7-2.el10_2.6 |
| Oracle Linux · 10 | gstreamer1-plugins-bad-free-devel | 0:1.26.7-2.el10_2.6 |
| Oracle Linux · 10 | gstreamer1-plugins-bad-free-libs | 0:1.26.7-2.el10_2.6 |
Vulnerabilities 2
-
High 7.5
Gstreamer1-plugins-bad-free: gstreamer: dtls certificate subject dn stack buffer overflow in openssl_verify_callback
A stack buffer overflow vulnerability was found in GStreamer's DTLS plugin. During a DTLS handshake, the peer certificate Subject Distinguished Name is printed into a fixed-size 2048-byte stack buffer without bounds checking. A remote unauthenticated attacker…
-
High 7.1
Gstreamer1-plugins-bad-free: gstreamer: rfbsrc/librfb hextile heap out-of-bounds write with 16bpp framebuffer
A heap buffer overflow vulnerability was found in GStreamer's rfbsrc plugin. When a client connects to a malicious RFB/VNC server that advertises a 16bpp framebuffer and sends Hextile-encoded updates, the Hextile background fill path writes 32-bit pixel value…