CVE-2026-52720
High · 8.8CVSS
8.8
EPSS
0.6%
Published
Jun 15, 2026
CISA due date
—
The record
A heap buffer overflow vulnerability was found in GStreamer's librfb (RFB/VNC client). The rectangle bounds check incorrectly validates area rather than individual dimensions, allowing a malicious VNC server to send a rectangle that extends beyond the framebuffer. A remote attacker could set up a malicious VNC server and trick a user into connecting, resulting in an out-of-bounds heap write that could lead to code execution or a crash.
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|---|---|---|
| openSUSE:Tumbleweed | gstreamer-plugins-bad | 0 | 1.28.4+24-1.1 |
Related vulnerabilities
- CVE-2026-52718 A denial of service vulnerability was found in GStreamer's AV1 codec parser in… Also affects gstreamer-plugins-bad
- CVE-2017-5838 The gst_date_time_new_from_iso8601_string function in gst/gstdatetime.c in GStreamer… Also affects gstreamer-plugins-bad
- CVE-2026-112403 Pillow is a Python imaging library. CWE-122
- CVE-2026-112393 Pillow is a Python imaging library. CWE-122
- CVE-2026-112395 Pillow is a Python imaging library. CWE-122
- CVE-2026-103658 GNU Aspell 0.60.8.2 (first vulnerable version is not known) contains a heap-based buffer… CWE-122
- CVE-2026-107161 A heap-based buffer overflow flaw was found in Cyrus SASL. CWE-122
- CVE-2026-106574 ImageMagick is free and open-source software used for editing and manipulating digital… CWE-122