A heap buffer overflow was discovered in the VNC TLS read path of gnome-remote-desktop on Red Enterprise Linux. The flaw occurs when the internal peek buffer does not properly compact bytes, causing an out‑of‑bounds write into a caller‑supplied buffer. An attacker who can reach an enabled VNC TLS listener and induce a peek/read size mismatch may exploit this to trigger a denial of service. The weakness corresponds to CWE‑121.

Affected systems include Red Hat Enterprise Linux 8, 9, and 10, where the gnome-remote-desktop service is deployed. The vulnerability is present in the default distribution packages shipped by Red Hat.

The CVSS score of 5.9 indicates a moderate risk. Exploitation requires network connectivity to the VNC TLS listener and the ability to manipulate peek/read sizes. The EPSS score is not available and the vulnerability is not listed in CISA KEV, suggesting limited known exploitation. The attack vector is inferred to be remote over the network, targeting systems that expose the VNC service.