CVE-2026-59691: Out-of-bounds Write in Red Hat Red Hat Enterprise Linux 10
A heap buffer overflow vulnerability was found in GStreamer's rfbsrc plugin. When a client connects to a malicious RFB/VNC server that advertises a 16bpp framebuffer and sends Hextile-encoded updates, the Hextile background fill path writes 32-bit pixel values into a buffer allocated for 16-bit pixels. This type mismatch causes an out-of-bounds heap write that can lead to denial of service (process crash) and potential memory corruption.
AI Analysis
Technical Summary
The vulnerability CVE-2026-59691 is a heap buffer overflow in the GStreamer rfbsrc plugin's handling of Hextile-encoded updates when connected to a malicious RFB/VNC server advertising a 16bpp framebuffer. Specifically, the Hextile background fill path writes 32-bit pixel values into a buffer intended for 16-bit pixels, causing an out-of-bounds heap write. This flaw can result in denial of service (process crash) and potential memory corruption. The issue affects Red Hat Enterprise Linux 10 versions from 10 up to but not including 10.2.6. Red Hat has issued security advisories and released updated gstreamer1-plugins-bad-free packages that fix this vulnerability.
Potential Impact
The vulnerability can cause denial of service through process crashes and may lead to memory corruption, which could potentially be leveraged for further exploitation. However, there are no known exploits in the wild at this time. The CVSS v3.1 base score is 7.1 (high severity) with network attack vector, low attack complexity, no privileges required, user interaction required, unchanged scope, no confidentiality impact, low integrity impact, and high availability impact.
Mitigation Recommendations
Red Hat has released official security updates for gstreamer1-plugins-bad-free that address CVE-2026-59691. Users of Red Hat Enterprise Linux 10 should apply the updates to versions 10.2.6 or later as provided in the Red Hat advisories RHSA-2026:47180 and RHSA-2026:47731. No additional mitigation steps are required beyond applying these official patches. Refer to https://access.redhat.com/articles/11258 for update instructions.
CVE-2026-59691: Out-of-bounds Write in Red Hat Red Hat Enterprise Linux 10
Description
A heap buffer overflow vulnerability was found in GStreamer's rfbsrc plugin. When a client connects to a malicious RFB/VNC server that advertises a 16bpp framebuffer and sends Hextile-encoded updates, the Hextile background fill path writes 32-bit pixel values into a buffer allocated for 16-bit pixels. This type mismatch causes an out-of-bounds heap write that can lead to denial of service (process crash) and potential memory corruption.
CVSS v3.1
Score 7.1high
Affected software
AI-Powered Analysis
Machine-generated threat intelligence
Technical Analysis
The vulnerability CVE-2026-59691 is a heap buffer overflow in the GStreamer rfbsrc plugin's handling of Hextile-encoded updates when connected to a malicious RFB/VNC server advertising a 16bpp framebuffer. Specifically, the Hextile background fill path writes 32-bit pixel values into a buffer intended for 16-bit pixels, causing an out-of-bounds heap write. This flaw can result in denial of service (process crash) and potential memory corruption. The issue affects Red Hat Enterprise Linux 10 versions from 10 up to but not including 10.2.6. Red Hat has issued security advisories and released updated gstreamer1-plugins-bad-free packages that fix this vulnerability.
Potential Impact
The vulnerability can cause denial of service through process crashes and may lead to memory corruption, which could potentially be leveraged for further exploitation. However, there are no known exploits in the wild at this time. The CVSS v3.1 base score is 7.1 (high severity) with network attack vector, low attack complexity, no privileges required, user interaction required, unchanged scope, no confidentiality impact, low integrity impact, and high availability impact.
Mitigation Recommendations
Red Hat has released official security updates for gstreamer1-plugins-bad-free that address CVE-2026-59691. Users of Red Hat Enterprise Linux 10 should apply the updates to versions 10.2.6 or later as provided in the Red Hat advisories RHSA-2026:47180 and RHSA-2026:47731. No additional mitigation steps are required beyond applying these official patches. Refer to https://access.redhat.com/articles/11258 for update instructions.
Technical Details
- Data Version
- 5.2
- Assigner Short Name
- redhat
- Date Reserved
- 2026-07-06T13:40:46.923Z
- Cvss Version
- 3.1
- State
- PUBLISHED
- Remediation Level
- null
- Vendor Advisory Urls
- [{"url":"https://access.redhat.com/security/cve/CVE-2026-59691","vendor":"Red Hat"}]
Threat ID: 6a4f798068715ace43289521
Added to database: 07/09/2026, 10:35:44 UTC
Last enriched: 08/14/2026, 13:15:13 UTC
Last updated: 08/22/2026, 22:52:15 UTC
Views: 83
Community Reviews
0 reviewsCrowdsource mitigation strategies, share intel context, and vote on the most helpful responses. Sign in to add your voice and help keep defenders ahead.
Want to contribute mitigation steps or threat intel context? Sign in or create an account to join the community discussion.
Actions
Updates to AI analysis require Pro Console access. Upgrade inside Console → Billing.
Need more coverage?
Upgrade to Pro Console for AI refresh and higher limits.
For incident response and remediation, OffSeq services can help resolve threats faster.
Latest Threats
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.