This vulnerability involves a heap buffer overflow in the librfb (RFB/VNC client) component of GStreamer on Red Hat Enterprise Linux 10. The flaw is due to improper validation of rectangle bounds, where the check incorrectly validates the total area instead of individual rectangle dimensions. This allows a malicious VNC server to send a rectangle that extends beyond the framebuffer, resulting in an out-of-bounds heap write. Exploitation requires a remote attacker to set up a malicious VNC server and convince a user to connect to it, potentially leading to arbitrary code execution or a denial of service via a crash. The CVSS 3.1 base score is 8.8, indicating high severity. The vendor advisory does not currently specify remediation or affected versions.

A remote attacker controlling a malicious VNC server can exploit this vulnerability by tricking a user into connecting, which may lead to out-of-bounds heap writes. This can result in arbitrary code execution or cause the client application to crash, impacting confidentiality, integrity, and availability of the affected system. The vulnerability is remotely exploitable without privileges and requires user interaction.

Patch status is not yet confirmed — check the Red Hat advisory at https://access.redhat.com/security/cve/CVE-2026-52720 for current remediation guidance. Until a patch or official fix is available, users should avoid connecting to untrusted VNC servers to mitigate risk. Monitor the vendor advisory for updates on patches or workarounds.