The gstreamer1-plugins-bad-free package, part of the GStreamer multimedia framework, contains two vulnerabilities: CVE-2026-59691 is a heap out-of-bounds write triggered in the rfbsrc/librfb Hextile code path when processing 16bpp framebuffers. CVE-2026-59692 is a stack buffer overflow in the DTLS certificate Subject DN verification callback function (openssl_verify_callback). Both vulnerabilities could lead to memory corruption. Red Hat has issued security advisories RHSA-2026:47180 and RHSA-2026:47731 providing updated packages for Red Hat Enterprise Linux 10 and 8 respectively, which fix these issues. The advisories include detailed package versions and instructions for applying the updates.

Successful exploitation of CVE-2026-59691 could result in a heap out-of-bounds write, potentially leading to application crashes or arbitrary code execution within the context of the affected GStreamer plugin. CVE-2026-59692 could cause a stack buffer overflow during DTLS certificate verification, which may also lead to memory corruption and possible code execution. Both vulnerabilities affect media processing components and could impact systems using the affected GStreamer plugins. No active exploitation has been reported.

Red Hat has released official security updates that fix these vulnerabilities. Users should apply the updated gstreamer1-plugins-bad-free packages provided by Red Hat for their respective Red Hat Enterprise Linux versions (8 and 10) and architectures as detailed in advisories RHSA-2026:47180 and RHSA-2026:47731. Following the vendor's update instructions is the recommended remediation. No additional mitigation steps are indicated by the vendor.