CVE-2026-59692 is a stack buffer overflow vulnerability in the GStreamer DTLS plugin on Red Hat Enterprise Linux 10. Specifically, during the DTLS handshake, the peer certificate Subject Distinguished Name is printed into a fixed-size 2048-byte stack buffer without bounds checking. This allows a remote unauthenticated attacker to send a certificate with an oversized Subject DN that exceeds the buffer size, triggering a stack buffer overflow and causing the process to crash, leading to denial of service. The vulnerability has a CVSS 3.1 base score of 7.5 (high severity) with network attack vector, low attack complexity, no privileges required, no user interaction, and impacts availability only. Red Hat has issued security advisories and updates for the gstreamer1-plugins-bad-free package to address this issue in Red Hat Enterprise Linux 10 versions prior to 10.2.6.

The vulnerability allows a remote unauthenticated attacker to cause a denial of service by crashing the affected process through a stack buffer overflow triggered by an oversized Subject DN in a DTLS handshake certificate. There is no impact on confidentiality or integrity reported. No known exploits in the wild have been reported at this time.

Red Hat has released an official security update for the gstreamer1-plugins-bad-free package that fixes this vulnerability. Users should apply the update to versions 10.2.6 or later of Red Hat Enterprise Linux 10 to remediate the issue. Refer to the Red Hat advisory RHSA-2026:47180 for detailed update instructions. No additional mitigations are required once the update is applied.