CVE-2026-112060

6.4 Moyenne

Publiée le 18/10/2026 à 15:16 · Modifiée le 19/10/2026 à 23:14 · Analyse NVD reportée · Source : disclosure@vulncheck.com

Description

librtmp in RTMPDump through 2.6 contains an out-of-bounds read and heap out-of-bounds write vulnerability because AMF3_Decode ignores AMF3 property decode failures. Malicious RTMP servers or man-in-the-middle attackers can send oversized AMF3 string lengths, and with the token option DecodeTEA corrupts heap memory and leaks heap bytes.

Traduire en français

Produits concernés

RTMPDump librtmp

Scores CVSS

Version	Score	Source	Vecteur
4.0	6.1 Moyenne	disclosure@vulncheck.com	`CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:P/VC:L/VI:L/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X`
3.1	6.4 Moyenne	disclosure@vulncheck.com	`CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:H`

Faiblesses (CWE)

CWE-787

Références

https://git.ffmpeg.org/gitweb/rtmpdump.git/blob/138fdb258d9fc26f1843fd1b891180416c9dc575:/librtmp/amf.c
https://hackmd.io/@haindpwn/librtmp-amf3-decode-and-strict-array-oob
https://rtmpdump.mplayerhq.hu/
https://www.vulncheck.com/advisories/librtmp-rtmpdump-through-2.6-heap-out-of-bounds-write-via-amf3-decode

Ailleurs

NVD
CVE.org
CIRCL Vulnerability-Lookup
CERT-FR
GitHub Advisories