Yüksek CVSS 8.8

CVE-2026-52720: CVE-2026-52720: yığın (heap) taşması

Yayın: 15 Haziran 2026 23:16 · Güncelleme: 6 Kasım 2026 10:19

Açıklama (NVD)

A heap buffer overflow vulnerability was found in GStreamer's librfb (RFB/VNC client). The rectangle bounds check incorrectly validates area rather than individual dimensions, allowing a malicious VNC server to send a rectangle that extends beyond the framebuffer. A remote attacker could set up a malicious VNC server and trick a user into connecting, resulting in an out-of-bounds heap write that could lead to code execution or a crash.

Özet bilgiler

CVSS v3.1: 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
EPSS: %0,64 (yüzdelik 51)
CWE: CWE-122
Yama: Yok / bilinmiyor

Kaynaklar

Uygulamada aç Tüm CVE kayıtları