This vulnerability involves a stack buffer overflow in the GStreamer DTLS plugin used in Red Hat Enterprise Linux 10. Specifically, during the DTLS handshake, the peer certificate's Subject Distinguished Name is printed into a fixed-size 2048-byte stack buffer without proper bounds checking. An attacker can send a certificate with an excessively large Subject DN, which overflows the buffer, leading to a process crash and denial of service. The vulnerability has a CVSS 3.1 base score of 7.5 (high severity) with network attack vector, low attack complexity, no privileges required, no user interaction, and impacts availability only.

Successful exploitation results in a denial of service due to a process crash caused by a stack buffer overflow. There is no impact on confidentiality or integrity according to the CVSS vector. The attacker does not require authentication or user interaction to trigger the vulnerability remotely.

Patch status is not yet confirmed — check the vendor advisory at https://access.redhat.com/security/cve/CVE-2026-59692 for current remediation guidance. No official fix or temporary workaround is currently documented. Until a patch is available, consider restricting access to services using the vulnerable GStreamer DTLS plugin or applying other network-level mitigations to limit exposure.