CVE-2026-52720

Name of the Vulnerable Software and Affected Versions GStreamer (affected versions not specified)

Description A heap buffer overflow exists in the librfb (RFB/VNC client) component of GStreamer. The issue occurs because the rectangle bounds check validates the total area instead of individual dimensions. This allows a malicious VNC server to send a rectangle that extends beyond the framebuffer, leading to an out-of-bounds heap write. A remote attacker could exploit this by tricking a user into connecting to a malicious VNC server, potentially resulting in code execution or a system crash.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.