Описание
ELSA-2026-47180: gstreamer1-plugins-bad-free security update (IMPORTANT)
[1.26.7-2.5]
- Fix rfbsrc hextile and color read handling for non-32bpp pixel formats (CVE-2026-59691) Resolves: RHEL-193550
Обновленные пакеты
Oracle Linux 10
Oracle Linux aarch64
gstreamer1-plugins-bad-free
1.26.7-2.el10_2.6
gstreamer1-plugins-bad-free-devel
1.26.7-2.el10_2.6
gstreamer1-plugins-bad-free-libs
1.26.7-2.el10_2.6
Oracle Linux x86_64
gstreamer1-plugins-bad-free
1.26.7-2.el10_2.6
gstreamer1-plugins-bad-free-devel
1.26.7-2.el10_2.6
gstreamer1-plugins-bad-free-libs
1.26.7-2.el10_2.6
Связанные CVE
Связанные уязвимости
ELSA-2026-47179: gstreamer1-plugins-bad-free security update (IMPORTANT)
A heap buffer overflow vulnerability was found in GStreamer's rfbsrc plugin. When a client connects to a malicious RFB/VNC server that advertises a 16bpp framebuffer and sends Hextile-encoded updates, the Hextile background fill path writes 32-bit pixel values into a buffer allocated for 16-bit pixels. This type mismatch causes an out-of-bounds heap write that can lead to denial of service (process crash) and potential memory corruption.
A heap buffer overflow vulnerability was found in GStreamer's rfbsrc plugin. When a client connects to a malicious RFB/VNC server that advertises a 16bpp framebuffer and sends Hextile-encoded updates, the Hextile background fill path writes 32-bit pixel values into a buffer allocated for 16-bit pixels. This type mismatch causes an out-of-bounds heap write that can lead to denial of service (process crash) and potential memory corruption.
A heap buffer overflow vulnerability was found in GStreamer's rfbsrc plugin. When a client connects to a malicious RFB/VNC server that advertises a 16bpp framebuffer and sends Hextile-encoded updates, the Hextile background fill path writes 32-bit pixel values into a buffer allocated for 16-bit pixels. This type mismatch causes an out-of-bounds heap write that can lead to denial of service (process crash) and potential memory corruption.
A heap buffer overflow vulnerability was found in GStreamer's rfbsrc p ...