High severity7.5NVD Advisory· Published Jul 9, 2026· Updated Aug 19, 2026
CVE-2026-59692
CVE-2026-59692
Description
A stack buffer overflow vulnerability was found in GStreamer's DTLS plugin. During a DTLS handshake, the peer certificate Subject Distinguished Name is printed into a fixed-size 2048-byte stack buffer without bounds checking. A remote unauthenticated attacker can send a certificate with an oversized Subject DN that exceeds the buffer, causing a stack buffer overflow and process crash, resulting in denial of service.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
5- osv-coords4 versionspkg:rpm/opensuse/gstreamer-plugins-bad&distro=openSUSE%20Leap%2016.0pkg:rpm/almalinux/gstreamer1-plugins-bad-free-develpkg:rpm/almalinux/gstreamer1-plugins-bad-freepkg:rpm/almalinux/gstreamer1-plugins-bad-free-libs
< 1.26.7-160000.3.1+ 3 more
- (no CPE)range: < 1.26.7-160000.3.1
- (no CPE)range: < 1.22.12-7.el9_8.3
- (no CPE)range: < 1.22.12-7.el9_8.3
- (no CPE)range: < 1.22.12-7.el9_8.3
Patches
Vulnerability mechanics
References
14- access.redhat.com/errata/RHSA-2026:47179nvd
- access.redhat.com/errata/RHSA-2026:47180nvd
- access.redhat.com/errata/RHSA-2026:47731nvd
- access.redhat.com/errata/RHSA-2026:54658nvd
- access.redhat.com/errata/RHSA-2026:54659nvd
- access.redhat.com/errata/RHSA-2026:54660nvd
- access.redhat.com/errata/RHSA-2026:54664nvd
- access.redhat.com/errata/RHSA-2026:54665nvd
- access.redhat.com/errata/RHSA-2026:54752nvd
- access.redhat.com/errata/RHSA-2026:56658nvd
- access.redhat.com/errata/RHSA-2026:56772nvd
- access.redhat.com/security/cve/CVE-2026-59692nvd
- bugzilla.redhat.com/show_bug.cginvd
- gitlab.freedesktop.org/gstreamer/gstreamer-security/-/merge_requests/99nvd
News mentions
1- Gstreamer: Two Important Flaws Including Heap Write and DTLS Overflow Disclosed TogetherVypr Intelligence · Jul 8, 2026