CVE-2026-52720 is a heap buffer overflow vulnerability in GStreamer's librfb (RFB/VNC client) component. The flaw is due to improper validation of rectangle bounds where the check incorrectly validates the area instead of individual dimensions. This allows a remote attacker controlling a malicious VNC server to send crafted rectangles that extend beyond the framebuffer, resulting in an out-of-bounds heap write. This vulnerability can be exploited by tricking a user into connecting to the malicious server, potentially leading to code execution or application crash. Red Hat has released an important security update for the gstreamer1-plugins-bad-free package in Red Hat Enterprise Linux 8 to fix this issue.

Successful exploitation of this vulnerability allows a remote attacker to cause an out-of-bounds heap write in the affected GStreamer component. This can lead to denial of service (application crash) or potentially remote code execution with the privileges of the user running the VNC client. The CVSS v3.1 base score is 8.8 (high severity) with vector AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H, indicating network attack vector, low attack complexity, no privileges required, user interaction required, unchanged scope, and high impact on confidentiality, integrity, and availability.

Red Hat has issued an official security update (RHSA-2026:37130) for the gstreamer1-plugins-bad-free package in Red Hat Enterprise Linux 8 that addresses this vulnerability. Users should apply the update as described in the Red Hat advisory and associated article (https://access.redhat.com/articles/11258) to remediate the issue. No alternative mitigations or workarounds are specified in the advisory. Patch status: official fix available.