CVE-2026-59691: Red Hat Enterprise Linux 10

High severity, CVSS 7.1. EPSS: 0.6% chance of exploitation in the next 30 days.

A heap buffer overflow vulnerability was found in GStreamer's rfbsrc plugin. When a client connects to a malicious RFB/VNC server that advertises a 16bpp framebuffer and sends Hextile-encoded updates, the Hextile background fill path writes 32-bit pixel values into a buffer allocated for 16-bit pixels. This type mismatch causes an out-of-bounds heap write that can lead to denial of service (process crash) and potential memory corruption.

Affected products

  • Red Hat Red Hat Enterprise Linux 10: before 0:1.26.7-2.el10_2.6 (fixed in 0:1.26.7-2.el10_2.6)
  • Red Hat Red Hat Enterprise Linux 10.0 Extended Update Support: before 0:1.24.11-3.el10_0.6 (fixed in 0:1.24.11-3.el10_0.6)
  • Red Hat Red Hat Enterprise Linux 6
  • Red Hat Red Hat Enterprise Linux 7 Extended Lifecycle Support: before 0:1.10.4-7.el7_9 (fixed in 0:1.10.4-7.el7_9); before 0:0.10.23-26.el7_9 (fixed in 0:0.10.23-26.el7_9)
  • Red Hat Red Hat Enterprise Linux 8: before 0:1.16.1-9.el8_10.1 (fixed in 0:1.16.1-9.el8_10.1)
  • Red Hat Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support: before 0:1.16.1-4.el8_4.4 (fixed in 0:1.16.1-4.el8_4.4)
  • Red Hat Red Hat Enterprise Linux 8.4 Extended Update Support Long-Life Add-On: before 0:1.16.1-4.el8_4.4 (fixed in 0:1.16.1-4.el8_4.4)
  • Red Hat Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support: before 0:1.16.1-4.el8_6.4 (fixed in 0:1.16.1-4.el8_6.4)
  • Red Hat Red Hat Enterprise Linux 8.6 Extended Update Support Long-Life Add-On: before 0:1.16.1-4.el8_6.4 (fixed in 0:1.16.1-4.el8_6.4)
  • Red Hat Red Hat Enterprise Linux 8.8 Telecommunications Update Service: before 0:1.16.1-4.el8_8.4 (fixed in 0:1.16.1-4.el8_8.4)
  • Red Hat Red Hat Enterprise Linux 8.8 Update Services For SAP Solutions: before 0:1.16.1-4.el8_8.4 (fixed in 0:1.16.1-4.el8_8.4)
  • Red Hat Red Hat Enterprise Linux 9: before 0:1.22.12-7.el9_8.3 (fixed in 0:1.22.12-7.el9_8.3)
  • Red Hat Red Hat Enterprise Linux 9.2 Update Services For SAP Solutions: before 0:1.18.4-9.el9_2.5 (fixed in 0:1.18.4-9.el9_2.5)
  • Red Hat Red Hat Enterprise Linux 9.4 Update Services For SAP Solutions: before 0:1.22.1-6.el9_4.6 (fixed in 0:1.22.1-6.el9_4.6)
  • Red Hat Red Hat Enterprise Linux 9.6 Extended Update Support: before 0:1.22.12-5.el9_6.6 (fixed in 0:1.22.12-5.el9_6.6)

Published 2026-07-09. Last modified 2026-09-02.