Red Hat Red Hat Enterprise Linux 10 Out-Of-Bounds Write Permits Denial Of Service
Last refreshed2026-10-15
Status: UPDATED
| Advisory ID: CVE-2026-86476
Key Details
CVE
CVE-2026-86476
CVSS Score / Version
8.4 (High) / CVSS v3.1
Updated
2026-10-14
CVSS Vector
CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS Prose
attack vector is local; attack complexity is low; privileges required is none; user interaction is none; scope is unchanged; confidentiality impact is high; integrity impact is high; availability impact is high.
Affected products
Red Hat Enterprise Linux 10, Red Hat Enterprise Linux 8, Red Hat Enterprise Linux 9, Red Hat Enterprise Linux 7, and Red Hat Enterprise Linux 6
Classified as
CWE-787 (Out-of-bounds Write)
Exploitation prediction (EPSS)
0.21% probability of exploitation in the next 30 days (10% percentile) -- FIRST.org's EPSS model.
Affected Products, Subsystems & Sectors
Vendor
Product
Affected Versions
Patch Status
Red Hat
Red Hat Enterprise Linux 10
Red Hat
Red Hat Enterprise Linux 8
Red Hat
Red Hat Enterprise Linux 9
Red Hat
Red Hat Enterprise Linux 7
Red Hat
Red Hat Enterprise Linux 6
Subsystems
OT Supporting Infrastructure
Sectors
Multiple
What to Know
A flaw was found in gst-plugins-base. A heap buffer overflow can be triggered when processing video buffers whose attached GstVideoMeta metadata declares plane strides and offsets that exceed the actual backing memory allocation. The metadata is not range-checked during deserialization, and the video frame mapping code does not verify that the declared plane geometry fits within the buffer before allowing consumers to read or write video data. A local attacker who controls the sending side of a GStreamer inter-process IPC pipeline can deliver a crafted buffer carrying fabricated strides, causing the receiving process to read or write beyond heap boundaries. Successful exploitation can cause a denial of service or potentially allow code execution within the affected process. (NVD)
What to Do
Monitor Red Hat's web page for any future patch releases.