Red Hat Security Advisory: gstreamer1-plugins-bad-free security update
Two security vulnerabilities were addressed in the gstreamer1-plugins-bad-free package for Red Hat Enterprise Linux 10. These include a heap out-of-bounds write in the rfbsrc/librfb Hextile with 16bpp framebuffer (CVE-2026-59691) and a stack buffer overflow in the DTLS certificate Subject DN verification callback (CVE-2026-59692). Red Hat has released an important security update to fix these issues.
AI Analysis
Technical Summary
The Red Hat security advisory RHSA-2026:47180 reports fixes for two vulnerabilities in the gstreamer1-plugins-bad-free package. CVE-2026-59691 is a heap out-of-bounds write vulnerability in the rfbsrc/librfb Hextile code path when handling 16bpp framebuffers. CVE-2026-59692 is a stack buffer overflow in the openssl_verify_callback function related to DTLS certificate Subject DN processing. Both vulnerabilities could lead to memory corruption. The advisory provides updated packages for Red Hat Enterprise Linux 10 and related variants to remediate these issues.
Potential Impact
These vulnerabilities could allow an attacker to cause memory corruption, potentially leading to denial of service or other impacts depending on the context in which the vulnerable code is used. The advisory rates the security impact as Important. There are no known exploits in the wild at the time of the advisory.
Mitigation Recommendations
Red Hat has released updated packages for gstreamer1-plugins-bad-free that address these vulnerabilities. Users should apply the security update as described in the Red Hat advisory RHSA-2026:47180. No additional mitigation steps are indicated beyond applying the official patch.
Red Hat Security Advisory: gstreamer1-plugins-bad-free security update
Description
Two security vulnerabilities were addressed in the gstreamer1-plugins-bad-free package for Red Hat Enterprise Linux 10. These include a heap out-of-bounds write in the rfbsrc/librfb Hextile with 16bpp framebuffer (CVE-2026-59691) and a stack buffer overflow in the DTLS certificate Subject DN verification callback (CVE-2026-59692). Red Hat has released an important security update to fix these issues.
Affected software
AI-Powered Analysis
Machine-generated threat intelligence
Technical Analysis
The Red Hat security advisory RHSA-2026:47180 reports fixes for two vulnerabilities in the gstreamer1-plugins-bad-free package. CVE-2026-59691 is a heap out-of-bounds write vulnerability in the rfbsrc/librfb Hextile code path when handling 16bpp framebuffers. CVE-2026-59692 is a stack buffer overflow in the openssl_verify_callback function related to DTLS certificate Subject DN processing. Both vulnerabilities could lead to memory corruption. The advisory provides updated packages for Red Hat Enterprise Linux 10 and related variants to remediate these issues.
Potential Impact
These vulnerabilities could allow an attacker to cause memory corruption, potentially leading to denial of service or other impacts depending on the context in which the vulnerable code is used. The advisory rates the security impact as Important. There are no known exploits in the wild at the time of the advisory.
Mitigation Recommendations
Red Hat has released updated packages for gstreamer1-plugins-bad-free that address these vulnerabilities. Users should apply the security update as described in the Red Hat advisory RHSA-2026:47180. No additional mitigation steps are indicated beyond applying the official patch.
Technical Details
- Gcve Source
- db.gcve.eu
- Csaf Category
- csaf_security_advisory
- Csaf Version
- 2.0
- Publisher
- Red Hat Product Security
- Advisory Id
- RHSA-2026:47180
- Cve Count
- 2
- Additional Cves
- ["CVE-2026-59692"]
- State
- PUBLISHED
Threat ID: 6a6940099c2644c7f8665d61
Added to database: 07/28/2026, 23:49:29 UTC
Last enriched: 09/12/2026, 07:48:28 UTC
Last updated: 09/12/2026, 22:01:35 UTC
Views: 49
Community Reviews
0 reviewsCrowdsource mitigation strategies, share intel context, and vote on the most helpful responses. Sign in to add your voice and help keep defenders ahead.
Want to contribute mitigation steps or threat intel context? Sign in or create an account to join the community discussion.
Actions
Updates to AI analysis require Pro Console access. Upgrade inside Console → Billing.
Need more coverage?
Upgrade to Pro Console for AI refresh and higher limits.
For incident response and remediation, OffSeq services can help resolve threats faster.
Latest Threats
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.