CVE-2026-59692 Details

A stack buffer overflow vulnerability exists in the DTLS plugin of GStreamer, specifically in versions included with Red Hat Enterprise Linux 6, 7, 8, 9, 10, and RHIVOS. During a DTLS handshake, the plugin improperly handles peer certificates by writing the Subject Distinguished Name into a fixed-size 2048-byte stack buffer without adequate bounds checking. This flaw allows remote, unauthenticated attackers to send certificates with oversized Subject DNs, exceeding the buffer limit and causing a stack buffer overflow that crashes the process, leading to a denial-of-service condition.

Users can remove the DTLS plugin shared object from the GStreamer plugins directory or restrict network access to WebRTC/DTLS endpoints to trusted peers only via firewall rules. Alternatively, GStreamer WebRTC services can be deployed behind a reverse proxy or media server that validates DTLS certificates before forwarding.