A heap buffer overflow vulnerability was found in GStreamer's rfbsrc plugin. When a client connects to a malicious RFB/VNC server that advertises a 16bpp framebuffer and sends Hextile-encoded updates, the Hextile background fill path writes 32-bit pixel values into a buffer allocated for 16-bit pixels. This type mismatch causes an out-of-bounds heap write that can lead to denial of service (process crash) and potential memory corruption.
CVSS Details
- CVSS 3.1 Base Score: 7.1
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade gstreamer1-plugins-bad-freeUpgrade gstreamer1-plugins-bad-free-devel | Jul 30, 2026 | Jul 29, 2026 |
| Amazon Linux Ami 2 | — | Upgrade gstreamer1-plugins-bad-free-debuginfoUpgrade gstreamer-plugins-bad-free-debuginfoUpgrade gstreamer-plugins-bad-freeUpgrade gstreamer1-plugins-bad-free-develUpgrade gstreamer-plugins-bad-free-develUpgrade gstreamer1-plugins-bad-freeUpgrade gstreamer-plugins-bad-free-devel-docs | Aug 5, 2026 | Aug 5, 2026 |
| Amazon_linux_2023 | — | Upgrade gstreamer1-plugins-bad-free-libs-debuginfoUpgrade gstreamer1-plugin-openh264-debuginfoUpgrade gstreamer1-plugins-bad-free-develUpgrade gstreamer1-plugins-bad-freeUpgrade gstreamer1-plugins-bad-free-debugsourceUpgrade gstreamer1-plugins-bad-free-libsUpgrade gstreamer1-plugins-bad-free-debuginfoUpgrade gstreamer1-plugin-openh264 | Aug 10, 2026 | Jul 9, 2026 |
| Freebsd | — | Upgrade gstreamer1-plugins-uglyUpgrade gstreamer1-plugins-goodUpgrade gstreamer1-plugins-badUpgrade gstreamer1-plugins | Jul 28, 2026 | Jul 24, 2026 |
| Redhat_linux | — | Upgrade gstreamer1-plugins-bad-free-develUpgrade gstreamer1-plugins-bad-free-gtkUpgrade gstreamer-plugins-bad-freeUpgrade gstreamer1-plugins-bad-free-debugsourceUpgrade gstreamer-plugins-bad-free-devel-docsUpgrade gstreamer1-plugins-bad-free-debuginfoUpgrade gstreamer-plugins-bad-free-develNo solution existsUpgrade gstreamer-plugins-bad-free-debuginfoUpgrade gstreamer1-plugins-bad-free-libs-debuginfoUpgrade gstreamer1-plugins-bad-freeUpgrade gstreamer1-plugins-bad-free-libs | Jul 17, 2026 | Jul 8, 2026 |
| Rocky_linux | — | Upgrade gstreamer1-plugins-bad-freeUpgrade gstreamer1-plugins-bad-free-libs-debuginfoUpgrade gstreamer1-plugins-bad-free-debuginfoUpgrade gstreamer1-plugins-bad-free-develUpgrade gstreamer1-plugins-bad-free-libsUpgrade gstreamer1-plugins-bad-free-debugsource | Jul 31, 2026 | Jul 30, 2026 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub