A heap buffer overflow vulnerability was found in GStreamer's rfbsrc plugin. When a client connects to a malicious RFB/VNC server that advertises a 16bpp framebuffer and sends Hextile-encoded updates, the Hextile background fill path writes 32-bit pixel values into a buffer allocated for 16-bit pixels. This type mismatch causes an out-of-bounds heap write that can lead to denial of service (process crash) and potential memory corruption.
CVSS Details
- CVSS 3.1 Base Score: 7.1
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade gstreamer1-plugins-bad-free-develUpgrade gstreamer1-plugins-bad-freeUpgrade gstreamer1-plugins-bad-free-libs | Jul 30, 2026 | Jul 29, 2026 |
| Amazon Linux Ami 2 | — | Upgrade gstreamer-plugins-bad-free-develUpgrade gstreamer-plugins-bad-free-devel-docsUpgrade gstreamer1-plugins-bad-freeUpgrade gstreamer-plugins-bad-freeUpgrade gstreamer1-plugins-bad-free-develUpgrade gstreamer-plugins-bad-free-debuginfoUpgrade gstreamer1-plugins-bad-free-debuginfo | Aug 5, 2026 | Aug 5, 2026 |
| Amazon_linux_2023 | — | Upgrade gstreamer1-plugins-bad-free-libs-debuginfoUpgrade gstreamer1-plugin-openh264-debuginfoUpgrade gstreamer1-plugin-openh264Upgrade gstreamer1-plugins-bad-free-debugsourceUpgrade gstreamer1-plugins-bad-free-libsUpgrade gstreamer1-plugins-bad-freeUpgrade gstreamer1-plugins-bad-free-develUpgrade gstreamer1-plugins-bad-free-debuginfo | Aug 10, 2026 | Jul 9, 2026 |
| Debian | — | Upgrade gst-plugins-bad1.0 | Oct 20, 2026 | Jul 9, 2026 |
| Freebsd | — | Upgrade gstreamer1-pluginsUpgrade gstreamer1-plugins-badUpgrade gstreamer1-plugins-goodUpgrade gstreamer1-plugins-ugly | Jul 28, 2026 | Jul 24, 2026 |
| Redhat_linux | — | Upgrade gstreamer-plugins-bad-free-devel-docsUpgrade gstreamer-plugins-bad-free-develNo solution existsUpgrade gstreamer-plugins-bad-free-debuginfoUpgrade gstreamer1-plugins-bad-free-libs-debuginfoUpgrade gstreamer1-plugins-bad-free-debuginfoUpgrade gstreamer1-plugins-bad-free-libsUpgrade gstreamer1-plugins-bad-freeUpgrade gstreamer1-plugins-bad-free-gtkUpgrade gstreamer1-plugins-bad-free-develUpgrade gstreamer1-plugins-bad-free-debugsourceUpgrade gstreamer-plugins-bad-free | Jul 17, 2026 | Jul 8, 2026 |
| Rocky_linux | — | Upgrade gstreamer1-plugins-bad-free-libsUpgrade gstreamer1-plugins-bad-free-libs-debuginfoUpgrade gstreamer1-plugins-bad-free-develUpgrade gstreamer1-plugins-bad-free-debugsourceUpgrade gstreamer1-plugins-bad-free-debuginfoUpgrade gstreamer1-plugins-bad-free | Jul 31, 2026 | Jul 30, 2026 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub