Skip to content

CVE-2026-59691

Gstreamer1-plugins-bad-free: gstreamer: rfbsrc/librfb hextile heap out-of-bounds write with 16bpp framebuffer

7.1 HighFix available

A heap buffer overflow vulnerability was found in GStreamer's rfbsrc plugin. When a client connects to a malicious RFB/VNC server that advertises a 16bpp framebuffer and sends Hextile-encoded updates, the Hextile background fill path writes 32-bit pixel values into a buffer allocated for 16-bit pixels. This type mismatch causes an out-of-bounds heap write that can lead to denial of service (process crash) and potential memory corruption.

Attack profile

How easy it is to exploit

Attack vector: Network
Complexity: Low
Privileges needed: None
User interaction: Required

What an attacker can affect

Confidentiality: None
Integrity: Low
Availability: High

Exploit likelihood

0.33%Up 0.1 points since Jul 10, 2026

What each source reports

CVE List Score used 7.1

Gstreamer1-plugins-bad-free: gstreamer: rfbsrc/librfb hextile heap out-of-bounds write with 16bpp framebuffer

A heap buffer overflow vulnerability was found in GStreamer's rfbsrc plugin. When a client connects to a malicious RFB/VNC server that advertises a 16bpp framebuffer and sends Hextile-encoded updates, the Hextile background fill path writes 32-bit pixel values into a buffer allocated for 16-bit pixels. This type mismatch causes an out-of-bounds heap write that can lead to denial of service (process crash) and potential memory corruption.

Record: CVE-2026-59691
CVSS 3.1: 7.1 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:H
Weakness: CWE-787
Updated: 2026-11-02

EUVDEUVD-2026-42569 7.1

A heap buffer overflow vulnerability was found in GStreamer's rfbsrc plugin. When a client connects to a malicious RFB/VNC server that advertises a 16bpp framebuffer and sends Hextile-encoded updates, the Hextile background fill path writes 32-bit pixel values into a buffer allocated for 16-bit pixels. This type mismatch causes an out-of-bounds heap write that can lead to denial of service (process crash) and potential memory corruption.

Record: EUVD-2026-42569
CVSS 3.1: 7.1 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:H
Updated: 2026-11-05

GitHub AdvisoriesGHSA-g4ff-54hw-hj6r 7.1

A heap buffer overflow vulnerability was found in GStreamer's rfbsrc plugin. When a client...

A heap buffer overflow vulnerability was found in GStreamer's rfbsrc plugin. When a client connects to a malicious RFB/VNC server that advertises a 16bpp framebuffer and sends Hextile-encoded updates, the Hextile background fill path writes 32-bit pixel values into a buffer allocated for 16-bit pixels. This type mismatch causes an out-of-bounds heap write that can lead to denial of service (process crash) and potential memory corruption.

Record: GHSA-g4ff-54hw-hj6r
CVSS 3.1: 7.1 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:H
Weakness: CWE-787
Updated: 2026-11-02

NVD 7.1

A heap buffer overflow vulnerability was found in GStreamer's rfbsrc plugin. When a client connects to a malicious RFB/VNC server that advertises a 16bpp framebuffer and sends Hextile-encoded updates, the Hextile background fill path writes 32-bit pixel values into a buffer allocated for 16-bit pixels. This type mismatch causes an out-of-bounds heap write that can lead to denial of service (process crash) and potential memory corruption.

Record: CVE-2026-59691
CVSS 3.1: 7.1 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:H
Weakness: CWE-787
Updated: 2026-11-05

OSVDEBIAN-CVE-2026-59691 7.1

A heap buffer overflow vulnerability was found in GStreamer's rfbsrc plugin. When a client connects to a malicious RFB/VNC server that advertises a 16bpp framebuffer and sends Hextile-encoded updates, the Hextile background fill path writes 32-bit pixel values into a buffer allocated for 16-bit pixels. This type mismatch causes an out-of-bounds heap write that can lead to denial of service (process crash) and potential memory corruption.

Record: DEBIAN-CVE-2026-59691
CVSS 3.1: 7.1 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:H
Updated: 2026-11-05

OSVRHSA-2026:47179 7.5

Red Hat Security Advisory: gstreamer1-plugins-bad-free security update

Record: RHSA-2026:47179
CVSS 3.1: 7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated: 2026-11-02

Show 20 moreShow less

OSVRHSA-2026:47180 7.5

Red Hat Security Advisory: gstreamer1-plugins-bad-free security update

Record: RHSA-2026:47180
CVSS 3.1: 7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated: 2026-11-02

OSVRHSA-2026:47731 7.5

Red Hat Security Advisory: gstreamer1-plugins-bad-free security update

Record: RHSA-2026:47731
CVSS 3.1: 7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated: 2026-11-02

OSVRHSA-2026:54658 7.5

Red Hat Security Advisory: gstreamer1-plugins-bad-free security update

Record: RHSA-2026:54658
CVSS 3.1: 7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated: 2026-11-02

OSVRHSA-2026:54659 7.5

Red Hat Security Advisory: gstreamer1-plugins-bad-free security update

Record: RHSA-2026:54659
CVSS 3.1: 7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated: 2026-11-02

OSVRHSA-2026:54660 7.5

Red Hat Security Advisory: gstreamer1-plugins-bad-free security update

Record: RHSA-2026:54660
CVSS 3.1: 7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated: 2026-11-02

OSVRHSA-2026:54664 7.5

Red Hat Security Advisory: gstreamer1-plugins-bad-free security update

Record: RHSA-2026:54664
CVSS 3.1: 7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated: 2026-11-02

OSVRHSA-2026:54665 7.5

Red Hat Security Advisory: gstreamer1-plugins-bad-free security update

Record: RHSA-2026:54665
CVSS 3.1: 7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated: 2026-11-02

OSVRHSA-2026:54752 7.5

Red Hat Security Advisory: gstreamer1-plugins-bad-free security update

Record: RHSA-2026:54752
CVSS 3.1: 7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated: 2026-11-02

OSVRHSA-2026:56658 7.5

Red Hat Security Advisory: gstreamer1-plugins-bad-free security update

Record: RHSA-2026:56658
CVSS 3.1: 7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated: 2026-11-02

OSVRHSA-2026:56772 7.5

Red Hat Security Advisory: gstreamer1-plugins-bad-free security update

Record: RHSA-2026:56772
CVSS 3.1: 7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated: 2026-11-02

OSVRHSA-2026:62532 7.1

Red Hat Security Advisory: gstreamer-plugins-bad-free security update

Record: RHSA-2026:62532
CVSS 3.1: 7.1 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:H
Updated: 2026-11-02

OSVRLSA-2026:47179 7.5

Important: gstreamer1-plugins-bad-free security update

GStreamer is a streaming media framework based on graphs of filters which operate on media data. The gstreamer1-plugins-bad-free package contains a collection of plug-ins for GStreamer.

Security Fix(es):

gstreamer: gstreamer: rfbsrc/librfb Hextile heap out-of-bounds write with 16bpp framebuffer (CVE-2026-59691)
gstreamer: gstreamer: DTLS certificate Subject DN stack buffer overflow in openssl_verify_callback (CVE-2026-59692)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record: RLSA-2026:47179
CVSS 3.1: 7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated: 2026-11-02

OSVRLSA-2026:47180 7.5

Important: gstreamer1-plugins-bad-free security update

GStreamer is a streaming media framework based on graphs of filters which operate on media data. The gstreamer1-plugins-bad-free package contains a collection of plug-ins for GStreamer.

Security Fix(es):

gstreamer: gstreamer: rfbsrc/librfb Hextile heap out-of-bounds write with 16bpp framebuffer (CVE-2026-59691)
gstreamer: gstreamer: DTLS certificate Subject DN stack buffer overflow in openssl_verify_callback (CVE-2026-59692)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record: RLSA-2026:47180
CVSS 3.1: 7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated: 2026-11-02

OSVRLSA-2026:47731 7.5

Important: gstreamer1-plugins-bad-free security update

GStreamer is a streaming media framework based on graphs of filters which operate on media data. The gstreamer1-plugins-bad-free package contains a collection of plug-ins for GStreamer.

Security Fix(es):

gstreamer: gstreamer: rfbsrc/librfb Hextile heap out-of-bounds write with 16bpp framebuffer (CVE-2026-59691)
gstreamer: gstreamer: DTLS certificate Subject DN stack buffer overflow in openssl_verify_callback (CVE-2026-59692)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record: RLSA-2026:47731
CVSS 3.1: 7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated: 2026-11-02

OSVUBUNTU-CVE-2026-59691 7.1

A heap buffer overflow vulnerability was found in GStreamer's rfbsrc plugin. When a client connects to a malicious RFB/VNC server that advertises a 16bpp framebuffer and sends Hextile-encoded updates, the Hextile background fill path writes 32-bit pixel values into a buffer allocated for 16-bit pixels. This type mismatch causes an out-of-bounds heap write that can lead to denial of service (process crash) and potential memory corruption.

Record: UBUNTU-CVE-2026-59691
CVSS 3.1: 7.1 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:H
Updated: 2026-11-02

OSVALSA-2026:47179 No score

Important: gstreamer1-plugins-bad-free security update

GStreamer is a streaming media framework based on graphs of filters which operate on media data. The gstreamer1-plugins-bad-free package contains a collection of plug-ins for GStreamer.

Security Fix(es):

gstreamer: gstreamer: rfbsrc/librfb Hextile heap out-of-bounds write with 16bpp framebuffer (CVE-2026-59691)
gstreamer: gstreamer: DTLS certificate Subject DN stack buffer overflow in openssl_verify_callback (CVE-2026-59692)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record: ALSA-2026:47179
Updated: 2026-11-02

OSVALSA-2026:47180 No score

Important: gstreamer1-plugins-bad-free security update

GStreamer is a streaming media framework based on graphs of filters which operate on media data. The gstreamer1-plugins-bad-free package contains a collection of plug-ins for GStreamer.

Security Fix(es):

gstreamer: gstreamer: rfbsrc/librfb Hextile heap out-of-bounds write with 16bpp framebuffer (CVE-2026-59691)
gstreamer: gstreamer: DTLS certificate Subject DN stack buffer overflow in openssl_verify_callback (CVE-2026-59692)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record: ALSA-2026:47180
Updated: 2026-11-02

OSVALSA-2026:47731 No score

Important: gstreamer1-plugins-bad-free security update

GStreamer is a streaming media framework based on graphs of filters which operate on media data. The gstreamer1-plugins-bad-free package contains a collection of plug-ins for GStreamer.

Security Fix(es):

gstreamer: gstreamer: rfbsrc/librfb Hextile heap out-of-bounds write with 16bpp framebuffer (CVE-2026-59691)
gstreamer: gstreamer: DTLS certificate Subject DN stack buffer overflow in openssl_verify_callback (CVE-2026-59692)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record: ALSA-2026:47731
Updated: 2026-11-02

OSVCLSA-2026-1790175495 No score

gstreamer1-plugins-bad-free: Fix of 2 CVEs

CVE-2026-59691: rfbsrc: write pixels at the negotiated bytes-per-pixel in rfb_decoder_fill_rectangle and read colour values through the new rfb_decoder_get_pixel helper, instead of always using 32-bit accesses
CVE-2026-59692: dtlsconnection: heap-allocate the peer certificate subject DN buffer from the X509_NAME_print_ex length in openssl_verify_callback, instead of printing into a fixed 2048-byte stack buffer

Record: CLSA-2026-1790175495
Updated: 2026-11-02

OSVCLSA-2026-1790239010 No score

gstreamer1-plugins-bad-free: Fix of 2 CVEs

CVE-2026-59691: fix a heap buffer overflow in the rfbsrc RRE, CoRRE and hextile decoders, which wrote 32-bit pixels into a buffer sized for the negotiated bits-per-pixel; write through the correct type for 1, 2 and 4 bytespp and reject any other format, and read colour values at the negotiated width at all seven call sites instead of a fixed four bytes
CVE-2026-59692: fix a stack buffer overflow in the DTLS connection handler, which printed the peer certificate subject DN into a fixed 2048-byte stack buffer; allocate it from the returned length instead and bound the read

Record: CLSA-2026-1790239010
Updated: 2026-11-02

Affected products

Show 3 moreShow less

Affected packages

Affected packages
Package	Affected	Fixed
`gstreamer1-plugins-bad-free` AlmaLinux:9 From an advisory covering 2 CVEs	before 1.22.12-7.el9_8.3	1.22.12-7.el9_8.3
`gstreamer1-plugins-bad-free-devel` AlmaLinux:9 From an advisory covering 2 CVEs	before 1.22.12-7.el9_8.3	1.22.12-7.el9_8.3
`gstreamer1-plugins-bad-free-libs` AlmaLinux:9 From an advisory covering 2 CVEs	before 1.22.12-7.el9_8.3	1.22.12-7.el9_8.3
`gstreamer1-plugins-bad-free` AlmaLinux:10 From an advisory covering 2 CVEs	before 1.26.7-2.el10_2.6	1.26.7-2.el10_2.6
`gstreamer1-plugins-bad-free-devel` AlmaLinux:10 From an advisory covering 2 CVEs	before 1.26.7-2.el10_2.6	1.26.7-2.el10_2.6
`gstreamer1-plugins-bad-free-libs` AlmaLinux:10 From an advisory covering 2 CVEs	before 1.26.7-2.el10_2.6	1.26.7-2.el10_2.6
`gstreamer1-plugins-bad-free` AlmaLinux:8 From an advisory covering 2 CVEs	before 1.16.1-9.el8_10.1	1.16.1-9.el8_10.1
`gstreamer1-plugins-bad-free-devel` AlmaLinux:8 From an advisory covering 2 CVEs	before 1.16.1-9.el8_10.1	1.16.1-9.el8_10.1
`gstreamer1-plugins-bad-free` TuxCare:AlmaLinux:9.6 From an advisory covering 2 CVEs	before 1.22.12-4.el9_6.tuxcare.els4	1.22.12-4.el9_6.tuxcare.els4
`gstreamer1-plugins-bad-free-devel` TuxCare:AlmaLinux:9.6 From an advisory covering 2 CVEs	before 1.22.12-4.el9_6.tuxcare.els4	1.22.12-4.el9_6.tuxcare.els4

Show 86 moreShow less

Affected packages
Package	Affected	Fixed
`gstreamer1-plugins-bad-free-libs` TuxCare:AlmaLinux:9.6 From an advisory covering 2 CVEs	before 1.22.12-4.el9_6.tuxcare.els4	1.22.12-4.el9_6.tuxcare.els4
`gstreamer1-plugins-bad-free` TuxCare:AlmaLinux:9.2 From an advisory covering 2 CVEs	before 1.18.4-6.el9_2.tuxcare.els9	1.18.4-6.el9_2.tuxcare.els9
`gstreamer1-plugins-bad-free-devel` TuxCare:AlmaLinux:9.2 From an advisory covering 2 CVEs	before 1.18.4-6.el9_2.tuxcare.els9	1.18.4-6.el9_2.tuxcare.els9
`gst-plugins-bad1.0` Debian:12	before 1.22.0-4+deb12u8, plus listed versions 1.22.0-41.22.0-4+deb12u11.22.0-4+deb12u21.22.0-4+deb12u31.22.0-4+deb12u41.22.0-4+deb12u51.22.0-4+deb12u61.22.0-4+deb12u7	1.22.0-4+deb12u8
`gst-plugins-bad1.0` Debian:13	All versions, plus listed versions 1.26.10-11.26.10-21.26.2-31.26.2-3+deb13u11.26.2-3+deb13u2 Show 37 moreShow less 1.26.2-3+deb13u31.26.3-11.26.4-11.26.5-11.26.5-21.26.6-11.26.6-21.26.6-31.26.6-41.26.6-51.26.7-11.26.7-21.26.8-11.26.9-11.27.1-11.27.2-11.27.50-11.27.90-11.27.90-21.27.90-31.28.0-11.28.1-11.28.1-21.28.1-31.28.2-11.28.2-21.28.3-11.28.4-11.28.5-11.28.5-21.28.6-11.28.7-11.28.7-21.28.8-11.29.1-11.29.2-11.29.2-2	None known
`gst-plugins-bad1.0` Debian:14	before 1.28.5-1, plus listed versions 1.26.10-11.26.10-21.26.2-31.26.3-11.26.4-1 Show 25 moreShow less 1.26.5-11.26.5-21.26.6-11.26.6-21.26.6-31.26.6-41.26.6-51.26.7-11.26.7-21.26.8-11.26.9-11.27.1-11.27.2-11.27.50-11.27.90-11.27.90-21.27.90-31.28.0-11.28.1-11.28.1-21.28.1-31.28.2-11.28.2-21.28.3-11.28.4-1	1.28.5-1
`gstreamer1-plugins-bad-free` Red Hat:enterprise_linux:9::appstream From an advisory covering 2 CVEs	before 0:1.22.12-7.el9_8.3	0:1.22.12-7.el9_8.3
`gstreamer1-plugins-bad-free-debuginfo` Red Hat:enterprise_linux:9::appstream From an advisory covering 2 CVEs	before 0:1.22.12-7.el9_8.3	0:1.22.12-7.el9_8.3
`gstreamer1-plugins-bad-free-debugsource` Red Hat:enterprise_linux:9::appstream From an advisory covering 2 CVEs	before 0:1.22.12-7.el9_8.3	0:1.22.12-7.el9_8.3
`gstreamer1-plugins-bad-free-libs` Red Hat:enterprise_linux:9::appstream From an advisory covering 2 CVEs	before 0:1.22.12-7.el9_8.3	0:1.22.12-7.el9_8.3
`gstreamer1-plugins-bad-free-libs-debuginfo` Red Hat:enterprise_linux:9::appstream From an advisory covering 2 CVEs	before 0:1.22.12-7.el9_8.3	0:1.22.12-7.el9_8.3
`gstreamer1-plugins-bad-free-debuginfo` Red Hat:enterprise_linux:9::crb From an advisory covering 2 CVEs	before 0:1.22.12-7.el9_8.3	0:1.22.12-7.el9_8.3
`gstreamer1-plugins-bad-free-debugsource` Red Hat:enterprise_linux:9::crb From an advisory covering 2 CVEs	before 0:1.22.12-7.el9_8.3	0:1.22.12-7.el9_8.3
`gstreamer1-plugins-bad-free-devel` Red Hat:enterprise_linux:9::crb From an advisory covering 2 CVEs	before 0:1.22.12-7.el9_8.3	0:1.22.12-7.el9_8.3
`gstreamer1-plugins-bad-free-libs-debuginfo` Red Hat:enterprise_linux:9::crb From an advisory covering 2 CVEs	before 0:1.22.12-7.el9_8.3	0:1.22.12-7.el9_8.3
`gstreamer1-plugins-bad-free` Red Hat:enterprise_linux:10.2 From an advisory covering 2 CVEs	before 0:1.26.7-2.el10_2.6	0:1.26.7-2.el10_2.6
`gstreamer1-plugins-bad-free-debuginfo` Red Hat:enterprise_linux:10.2 From an advisory covering 2 CVEs	before 0:1.26.7-2.el10_2.6	0:1.26.7-2.el10_2.6
`gstreamer1-plugins-bad-free-debugsource` Red Hat:enterprise_linux:10.2 From an advisory covering 2 CVEs	before 0:1.26.7-2.el10_2.6	0:1.26.7-2.el10_2.6
`gstreamer1-plugins-bad-free-libs` Red Hat:enterprise_linux:10.2 From an advisory covering 2 CVEs	before 0:1.26.7-2.el10_2.6	0:1.26.7-2.el10_2.6
`gstreamer1-plugins-bad-free-libs-debuginfo` Red Hat:enterprise_linux:10.2 From an advisory covering 2 CVEs	before 0:1.26.7-2.el10_2.6	0:1.26.7-2.el10_2.6
`gstreamer1-plugins-bad-free-devel` Red Hat:enterprise_linux:10.2 From an advisory covering 2 CVEs	before 0:1.26.7-2.el10_2.6	0:1.26.7-2.el10_2.6
`gstreamer1-plugins-bad-free` Red Hat:enterprise_linux:8::appstream From an advisory covering 2 CVEs	before 0:1.16.1-9.el8_10.1	0:1.16.1-9.el8_10.1
`gstreamer1-plugins-bad-free-debuginfo` Red Hat:enterprise_linux:8::appstream From an advisory covering 2 CVEs	before 0:1.16.1-9.el8_10.1	0:1.16.1-9.el8_10.1
`gstreamer1-plugins-bad-free-debugsource` Red Hat:enterprise_linux:8::appstream From an advisory covering 2 CVEs	before 0:1.16.1-9.el8_10.1	0:1.16.1-9.el8_10.1
`gstreamer1-plugins-bad-free-debuginfo` Red Hat:enterprise_linux:8::crb From an advisory covering 2 CVEs	before 0:1.16.1-9.el8_10.1	0:1.16.1-9.el8_10.1
`gstreamer1-plugins-bad-free-debugsource` Red Hat:enterprise_linux:8::crb From an advisory covering 2 CVEs	before 0:1.16.1-9.el8_10.1	0:1.16.1-9.el8_10.1
`gstreamer1-plugins-bad-free-devel` Red Hat:enterprise_linux:8::crb From an advisory covering 2 CVEs	before 0:1.16.1-9.el8_10.1	0:1.16.1-9.el8_10.1
`gstreamer1-plugins-bad-free` Red Hat:rhel_e4s:9.4::appstream From an advisory covering 2 CVEs	before 0:1.22.1-6.el9_4.6	0:1.22.1-6.el9_4.6
`gstreamer1-plugins-bad-free-debuginfo` Red Hat:rhel_e4s:9.4::appstream From an advisory covering 2 CVEs	before 0:1.22.1-6.el9_4.6	0:1.22.1-6.el9_4.6
`gstreamer1-plugins-bad-free-debugsource` Red Hat:rhel_e4s:9.4::appstream From an advisory covering 2 CVEs	before 0:1.22.1-6.el9_4.6	0:1.22.1-6.el9_4.6
`gstreamer1-plugins-bad-free` Red Hat:enterprise_linux_eus:10.0 From an advisory covering 2 CVEs	before 0:1.24.11-3.el10_0.6	0:1.24.11-3.el10_0.6
`gstreamer1-plugins-bad-free-debuginfo` Red Hat:enterprise_linux_eus:10.0 From an advisory covering 2 CVEs	before 0:1.24.11-3.el10_0.6	0:1.24.11-3.el10_0.6
`gstreamer1-plugins-bad-free-debugsource` Red Hat:enterprise_linux_eus:10.0 From an advisory covering 2 CVEs	before 0:1.24.11-3.el10_0.6	0:1.24.11-3.el10_0.6
`gstreamer1-plugins-bad-free-libs` Red Hat:enterprise_linux_eus:10.0 From an advisory covering 2 CVEs	before 0:1.24.11-3.el10_0.6	0:1.24.11-3.el10_0.6
`gstreamer1-plugins-bad-free-libs-debuginfo` Red Hat:enterprise_linux_eus:10.0 From an advisory covering 2 CVEs	before 0:1.24.11-3.el10_0.6	0:1.24.11-3.el10_0.6
`gstreamer1-plugins-bad-free-devel` Red Hat:enterprise_linux_eus:10.0 From an advisory covering 2 CVEs	before 0:1.24.11-3.el10_0.6	0:1.24.11-3.el10_0.6
`gstreamer1-plugins-bad-free` Red Hat:rhel_eus:9.6::appstream From an advisory covering 2 CVEs	before 0:1.22.12-5.el9_6.6	0:1.22.12-5.el9_6.6
`gstreamer1-plugins-bad-free-debuginfo` Red Hat:rhel_eus:9.6::appstream From an advisory covering 2 CVEs	before 0:1.22.12-5.el9_6.6	0:1.22.12-5.el9_6.6
`gstreamer1-plugins-bad-free-debugsource` Red Hat:rhel_eus:9.6::appstream From an advisory covering 2 CVEs	before 0:1.22.12-5.el9_6.6	0:1.22.12-5.el9_6.6
`gstreamer1-plugins-bad-free-libs` Red Hat:rhel_eus:9.6::appstream From an advisory covering 2 CVEs	before 0:1.22.12-5.el9_6.6	0:1.22.12-5.el9_6.6
`gstreamer1-plugins-bad-free-libs-debuginfo` Red Hat:rhel_eus:9.6::appstream From an advisory covering 2 CVEs	before 0:1.22.12-5.el9_6.6	0:1.22.12-5.el9_6.6
`gstreamer1-plugins-bad-free-debuginfo` Red Hat:rhel_eus:9.6::crb From an advisory covering 2 CVEs	before 0:1.22.12-5.el9_6.6	0:1.22.12-5.el9_6.6
`gstreamer1-plugins-bad-free-debugsource` Red Hat:rhel_eus:9.6::crb From an advisory covering 2 CVEs	before 0:1.22.12-5.el9_6.6	0:1.22.12-5.el9_6.6
`gstreamer1-plugins-bad-free-devel` Red Hat:rhel_eus:9.6::crb From an advisory covering 2 CVEs	before 0:1.22.12-5.el9_6.6	0:1.22.12-5.el9_6.6
`gstreamer1-plugins-bad-free-libs-debuginfo` Red Hat:rhel_eus:9.6::crb From an advisory covering 2 CVEs	before 0:1.22.12-5.el9_6.6	0:1.22.12-5.el9_6.6
`gstreamer1-plugins-bad-free` Red Hat:rhel_e4s:8.8::appstream From an advisory covering 2 CVEs	before 0:1.16.1-4.el8_8.4	0:1.16.1-4.el8_8.4
`gstreamer1-plugins-bad-free-debuginfo` Red Hat:rhel_e4s:8.8::appstream From an advisory covering 2 CVEs	before 0:1.16.1-4.el8_8.4	0:1.16.1-4.el8_8.4
`gstreamer1-plugins-bad-free-debugsource` Red Hat:rhel_e4s:8.8::appstream From an advisory covering 2 CVEs	before 0:1.16.1-4.el8_8.4	0:1.16.1-4.el8_8.4
`gstreamer1-plugins-bad-free` Red Hat:rhel_tus:8.8::appstream From an advisory covering 2 CVEs	before 0:1.16.1-4.el8_8.4	0:1.16.1-4.el8_8.4
`gstreamer1-plugins-bad-free-debuginfo` Red Hat:rhel_tus:8.8::appstream From an advisory covering 2 CVEs	before 0:1.16.1-4.el8_8.4	0:1.16.1-4.el8_8.4
`gstreamer1-plugins-bad-free-debugsource` Red Hat:rhel_tus:8.8::appstream From an advisory covering 2 CVEs	before 0:1.16.1-4.el8_8.4	0:1.16.1-4.el8_8.4
`gstreamer1-plugins-bad-free` Red Hat:rhel_aus:8.6::appstream From an advisory covering 2 CVEs	before 0:1.16.1-4.el8_6.4	0:1.16.1-4.el8_6.4
`gstreamer1-plugins-bad-free-debuginfo` Red Hat:rhel_aus:8.6::appstream From an advisory covering 2 CVEs	before 0:1.16.1-4.el8_6.4	0:1.16.1-4.el8_6.4
`gstreamer1-plugins-bad-free-debugsource` Red Hat:rhel_aus:8.6::appstream From an advisory covering 2 CVEs	before 0:1.16.1-4.el8_6.4	0:1.16.1-4.el8_6.4
`gstreamer1-plugins-bad-free` Red Hat:rhel_eus_long_life:8.6::appstream From an advisory covering 2 CVEs	before 0:1.16.1-4.el8_6.4	0:1.16.1-4.el8_6.4
`gstreamer1-plugins-bad-free-debuginfo` Red Hat:rhel_eus_long_life:8.6::appstream From an advisory covering 2 CVEs	before 0:1.16.1-4.el8_6.4	0:1.16.1-4.el8_6.4
`gstreamer1-plugins-bad-free-debugsource` Red Hat:rhel_eus_long_life:8.6::appstream From an advisory covering 2 CVEs	before 0:1.16.1-4.el8_6.4	0:1.16.1-4.el8_6.4
`gstreamer1-plugins-bad-free` Red Hat:rhel_els:7 From an advisory covering 2 CVEs	before 0:1.10.4-7.el7_9	0:1.10.4-7.el7_9
`gstreamer1-plugins-bad-free-debuginfo` Red Hat:rhel_els:7 From an advisory covering 2 CVEs	before 0:1.10.4-7.el7_9	0:1.10.4-7.el7_9
`gstreamer1-plugins-bad-free-devel` Red Hat:rhel_els:7 From an advisory covering 2 CVEs	before 0:1.10.4-7.el7_9	0:1.10.4-7.el7_9
`gstreamer1-plugins-bad-free-gtk` Red Hat:rhel_els:7 From an advisory covering 2 CVEs	before 0:1.10.4-7.el7_9	0:1.10.4-7.el7_9
`gstreamer1-plugins-bad-free` Red Hat:rhel_e4s:9.2::appstream From an advisory covering 2 CVEs	before 0:1.18.4-9.el9_2.5	0:1.18.4-9.el9_2.5
`gstreamer1-plugins-bad-free-debuginfo` Red Hat:rhel_e4s:9.2::appstream From an advisory covering 2 CVEs	before 0:1.18.4-9.el9_2.5	0:1.18.4-9.el9_2.5
`gstreamer1-plugins-bad-free-debugsource` Red Hat:rhel_e4s:9.2::appstream From an advisory covering 2 CVEs	before 0:1.18.4-9.el9_2.5	0:1.18.4-9.el9_2.5
`gstreamer1-plugins-bad-free` Red Hat:rhel_aus:8.4::appstream From an advisory covering 2 CVEs	before 0:1.16.1-4.el8_4.4	0:1.16.1-4.el8_4.4
`gstreamer1-plugins-bad-free-debuginfo` Red Hat:rhel_aus:8.4::appstream From an advisory covering 2 CVEs	before 0:1.16.1-4.el8_4.4	0:1.16.1-4.el8_4.4
`gstreamer1-plugins-bad-free-debugsource` Red Hat:rhel_aus:8.4::appstream From an advisory covering 2 CVEs	before 0:1.16.1-4.el8_4.4	0:1.16.1-4.el8_4.4
`gstreamer1-plugins-bad-free` Red Hat:rhel_eus_long_life:8.4::appstream From an advisory covering 2 CVEs	before 0:1.16.1-4.el8_4.4	0:1.16.1-4.el8_4.4
`gstreamer1-plugins-bad-free-debuginfo` Red Hat:rhel_eus_long_life:8.4::appstream From an advisory covering 2 CVEs	before 0:1.16.1-4.el8_4.4	0:1.16.1-4.el8_4.4
`gstreamer1-plugins-bad-free-debugsource` Red Hat:rhel_eus_long_life:8.4::appstream From an advisory covering 2 CVEs	before 0:1.16.1-4.el8_4.4	0:1.16.1-4.el8_4.4
`gstreamer-plugins-bad-free` Red Hat:rhel_els:7	before 0:0.10.23-26.el7_9	0:0.10.23-26.el7_9
`gstreamer-plugins-bad-free-debuginfo` Red Hat:rhel_els:7	before 0:0.10.23-26.el7_9	0:0.10.23-26.el7_9
`gstreamer-plugins-bad-free-devel` Red Hat:rhel_els:7	before 0:0.10.23-26.el7_9	0:0.10.23-26.el7_9
`gstreamer-plugins-bad-free-devel-docs` Red Hat:rhel_els:7	before 0:0.10.23-26.el7_9	0:0.10.23-26.el7_9
`gstreamer1-plugins-bad-free` Rocky Linux:9 From an advisory covering 2 CVEs	before 0:1.22.12-7.el9_8.3	0:1.22.12-7.el9_8.3
`gstreamer1-plugins-bad-free` Rocky Linux:10 From an advisory covering 2 CVEs	before 0:1.26.7-2.el10_2.6	0:1.26.7-2.el10_2.6
`gstreamer1-plugins-bad-free` Rocky Linux:8 From an advisory covering 2 CVEs	before 0:1.16.1-9.el8_10.1	0:1.16.1-9.el8_10.1
`gst-plugins-bad1.0` Ubuntu:Pro:14.04:LTS	All versions, plus listed versions 1.2.0-3ubuntu51.2.1-1ubuntu11.2.1-1ubuntu21.2.2-1ubuntu11.2.2-1ubuntu2 Show 6 moreShow less 1.2.2-1ubuntu41.2.3-1ubuntu11.2.3-1ubuntu21.2.4-1~ubuntu11.2.4-1~ubuntu1.11.2.4-1~ubuntu1.1+esm1	None known
`gst-plugins-bad1.0` Ubuntu:Pro:16.04:LTS	All versions, plus listed versions 1.6.0-1ubuntu11.6.1-1ubuntu11.6.2-1ubuntu11.7.1-1ubuntu11.7.1-1ubuntu3 Show 11 moreShow less 1.7.1-1ubuntu41.7.2-1ubuntu11.7.90-1ubuntu21.7.91-1ubuntu11.8.0-1ubuntu11.8.1-1ubuntu0.11.8.2-1ubuntu0.11.8.2-1ubuntu0.21.8.3-1ubuntu0.21.8.3-1ubuntu0.2+esm11.8.3-1ubuntu0.2+esm2	None known
`gst-plugins-bad1.0` Ubuntu:Pro:18.04:LTS	All versions, plus listed versions 1.12.3-1ubuntu11.12.3-1ubuntu21.12.3-2ubuntu11.12.4-2ubuntu11.12.4-2ubuntu2 Show 8 moreShow less 1.13.1-1ubuntu11.13.91-1ubuntu11.14.0-1ubuntu11.14.1-1ubuntu1~ubuntu18.04.11.14.4-1ubuntu1~ubuntu18.04.11.14.5-0ubuntu1~18.04.11.14.5-0ubuntu1~18.04.1+esm11.14.5-0ubuntu1~18.04.1+esm2	None known
`gst-plugins-bad1.0` Ubuntu:Pro:20.04:LTS	All versions, plus listed versions 1.16.1-1ubuntu11.16.1-1ubuntu31.16.1-1ubuntu41.16.1-1ubuntu51.16.1-1ubuntu6 Show 9 moreShow less 1.16.1-1ubuntu81.16.2-1ubuntu11.16.2-1ubuntu21.16.2-2ubuntu11.16.2-2.1ubuntu11.16.3-0ubuntu11.16.3-0ubuntu1.11.16.3-0ubuntu1.1+esm11.16.3-0ubuntu1.1+esm2	None known
`gst-plugins-bad1.0` Ubuntu:Pro:22.04:LTS	All versions, plus listed versions 1.18.5-1ubuntu11.18.5-1ubuntu31.20.0-2ubuntu21.20.1-1ubuntu21.20.3-0ubuntu11.20.3-0ubuntu1.11.20.3-0ubuntu1.1+esm21.20.3-0ubuntu1.1+esm3	None known
`gst-plugins-bad1.0` Ubuntu:Pro:24.04:LTS	All versions, plus listed versions 1.22.4-1ubuntu11.22.4-1ubuntu21.22.4-1ubuntu41.22.9-2ubuntu11.24.0-1ubuntu3 Show 4 moreShow less 1.24.0-1ubuntu41.24.2-1ubuntu41.24.2-1ubuntu4+esm11.24.2-1ubuntu4+esm2	None known
`gst-plugins-bad1.0` Ubuntu:25.10	All versions, plus listed versions 1.26.0-1ubuntu21.26.2-1ubuntu11.26.3-1ubuntu11.26.4-1ubuntu11.26.5-1ubuntu2	None known
`gst-plugins-bad1.0` Ubuntu:26.10	All versions, plus listed versions 1.28.2-1ubuntu11.28.2-1ubuntu21.28.4-1ubuntu11.28.4-1ubuntu21.28.6-1ubuntu1	None known
`gst-plugins-bad1.0` Ubuntu:26.04:LTS	All versions, plus listed versions 1.26.5-1ubuntu21.27.2-1ubuntu11.27.90-1ubuntu21.28.0-1ubuntu21.28.1-2ubuntu2 Show 4 moreShow less 1.28.1-2ubuntu31.28.2-1ubuntu11.28.2-1ubuntu1.11.28.2-1ubuntu1.2	None known

History

History
Recorded	Changed	Sources
Nov 6, 2026	affected	NVD, OSV
Nov 5, 2026	facts	EUVD
Nov 2, 2026	first indexed	CVE List, EUVD, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2026-59691 is a high vulnerability (CVSS 7.1) in Red Hat Enterprise Linux 10, published July 9, 2026. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.33%, the 25th percentile. Fixed in gst-plugins-bad1.0 1.22.0-4+deb12u8.

References

Show 44 moreShow less