Upstream information
Description
A heap buffer overflow vulnerability was found in GStreamer's rfbsrc plugin. When a client connects to a malicious RFB/VNC server that advertises a 16bpp framebuffer and sends Hextile-encoded updates, the Hextile background fill path writes 32-bit pixel values into a buffer allocated for 16-bit pixels. This type mismatch causes an out-of-bounds heap write that can lead to denial of service (process crash) and potential memory corruption.SUSE information
Overall state of this security issue: Resolved
This issue is currently rated as having important severity.
| CVSS detail | CNA (Red Hat) |
|---|---|
| Base Score | 7.1 |
| Vector | CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:H |
| Attack Vector | Network |
| Attack Complexity | Low |
| Privileges Required | None |
| User Interaction | Required |
| Scope | Unchanged |
| Confidentiality Impact | None |
| Integrity Impact | Low |
| Availability Impact | High |
| CVSSv3 Version | 3.1 |
SUSE Security Advisories:
- RHSA-2026:47179, published Wed Aug 5 15:07:08 UTC 2026
- RHSA-2026:47180, published Sat Aug 1 15:07:23 UTC 2026
- RHSA-2026:47731, published Fri Jul 31 15:06:55 UTC 2026
- RHSA-2026:54660, published Tue Aug 18 15:07:10 UTC 2026
List of released packages
| Product(s) | Fixed package version(s) | References |
|---|---|---|
| SUSE Liberty Linux 10 |
| Patchnames: RHSA-2026:47180 (x86_64) |
| SUSE Liberty Linux 8 |
| Patchnames: RHSA-2026:47731 (i686,x86_64) |
| SUSE Liberty Linux 9 |
| Patchnames: RHSA-2026:47179 (i686,x86_64) RHSA-2026:54660 (i686,x86_64) |
SUSE Timeline for this CVE
CVE page created: Wed Jul 29 21:54:05 2026CVE page last modified: Tue Aug 25 17:46:55 2026