Skip to content
Threat Feed
Subscribe

Product

Gstreamer-Plugins-Bad-Free

2 briefs RSS
medium advisory

CVE-2026-59692: GStreamer DTLS Plugin Stack Buffer Overflow Leading to DoS

A stack buffer overflow vulnerability, CVE-2026-59692, exists in GStreamer's DTLS plugin, allowing a remote unauthenticated attacker to cause a denial of service by sending a crafted certificate with an oversized Subject Distinguished Name during a DTLS handshake, which the plugin prints into a fixed-size stack buffer without bounds checking, leading to a process crash.

DTLS plugin +2 denial-of-service buffer-overflow vulnerability dtls gstreamer linux high_confidence_source watchlist_match
2t 1c
high advisory

CVE-2026-59691: GStreamer rfbsrc Heap Buffer Overflow Leads to DoS

A heap buffer overflow vulnerability (CVE-2026-59691) exists in GStreamer's rfbsrc plugin, allowing a malicious RFB/VNC server to trigger an out-of-bounds heap write in connecting clients, leading to denial of service and potential memory corruption.

GStreamer rfbsrc plugin +2 vulnerability heap-overflow denial-of-service gstreamer linux red-hat cve
1t 1c