This vulnerability in the GStreamer rfbsrc plugin involves a type mismatch during processing of Hextile-encoded framebuffer updates from a malicious RFB/VNC server. Specifically, when a 16bpp framebuffer is advertised, the plugin incorrectly writes 32-bit pixel values into a buffer sized for 16-bit pixels, resulting in an out-of-bounds heap write. The flaw can cause application crashes and memory corruption, impacting system stability and potentially enabling further exploitation. The issue affects Red Hat Enterprise Linux 10. No official remediation level or patch information is provided in the advisory.

The vulnerability can cause denial of service due to process crashes and may lead to memory corruption. There is no indication of confidentiality or integrity impact. No known exploits are reported in the wild at this time.

Patch status is not yet confirmed — check the Red Hat advisory at https://access.redhat.com/security/cve/CVE-2026-59691 for current remediation guidance. No official fix or workaround is stated in the provided advisory content. Users should monitor the vendor advisory for updates and apply patches once available.