https://db.gcve.eu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Wed, 11 Nov 2026 04:18:47 +0000 https://db.gcve.eu/vuln/certfr-2026-avi-1486 certfr-2026-avi-1486 https://db.gcve.eu/vuln/certfr-2026-avi-1486 https://db.gcve.eu/vuln/fkie_cve-2026-112060 <p>librtmp in RTMPDump through 2.6 contains an out-of-bounds read and heap out-of-bounds write vulnerability because AMF3_Decode ignores AMF3 property decode failures. Malicious RTMP servers or man-in-the-middle attackers can send oversized AMF3 string lengths, and with the token option DecodeTEA corrupts heap memory and leaks heap bytes.</p> <p>librtmp in RTMPDump through 2.6 contains an out-of-bounds read and heap out-of-bounds write vulnerability because AMF3_Decode ignores AMF3 property decode failures. Malicious RTMP servers or man-in-the-middle attackers can send oversized AMF3 string lengths, and with the token option DecodeTEA corrupts heap memory and leaks heap bytes.</p> https://db.gcve.eu/vuln/fkie_cve-2026-112060 https://db.gcve.eu/vuln/ghsa-x953-qc42-3hqh <p>librtmp in RTMPDump through 2.6 contains an out-of-bounds read and heap out-of-bounds write vulnerability because AMF3_Decode ignores AMF3 property decode failures. Malicious RTMP servers or man-in-the-middle attackers can send oversized AMF3 string lengths, and with the token option DecodeTEA corrupts heap memory and leaks heap bytes.</p> <p>librtmp in RTMPDump through 2.6 contains an out-of-bounds read and heap out-of-bounds write vulnerability because AMF3_Decode ignores AMF3 property decode failures. Malicious RTMP servers or man-in-the-middle attackers can send oversized AMF3 string lengths, and with the token option DecodeTEA corrupts heap memory and leaks heap bytes.</p> https://db.gcve.eu/vuln/ghsa-x953-qc42-3hqh https://db.gcve.eu/vuln/ubuntu-cve-2026-112060 <p><strong>Affected:</strong> Ubuntu:14.04:LTS: rtmpdump, Ubuntu:16.04:LTS: rtmpdump, Ubuntu:18.04:LTS: rtmpdump, Ubuntu:20.04:LTS: rtmpdump, Ubuntu:22.04:LTS: rtmpdump, Ubuntu:24.04:LTS: rtmpdump, Ubuntu:26.10: rtmpdump, Ubuntu:26.04:LTS: rtmpdump</p> <p>librtmp in RTMPDump through 2.6 contains an out-of-bounds read and heap out-of-bounds write vulnerability because AMF3_Decode ignores AMF3 property decode failures. Malicious RTMP servers or man-in-the-middle attackers can send oversized AMF3 string lengths, and with the token option DecodeTEA corrupts heap memory and leaks heap bytes.</p> <p><strong>Affected:</strong> Ubuntu:14.04:LTS: rtmpdump, Ubuntu:16.04:LTS: rtmpdump, Ubuntu:18.04:LTS: rtmpdump, Ubuntu:20.04:LTS: rtmpdump, Ubuntu:22.04:LTS: rtmpdump, Ubuntu:24.04:LTS: rtmpdump, Ubuntu:26.10: rtmpdump, Ubuntu:26.04:LTS: rtmpdump</p> <p>librtmp in RTMPDump through 2.6 contains an out-of-bounds read and heap out-of-bounds write vulnerability because AMF3_Decode ignores AMF3 property decode failures. Malicious RTMP servers or man-in-the-middle attackers can send oversized AMF3 string lengths, and with the token option DecodeTEA corrupts heap memory and leaks heap bytes.</p> https://db.gcve.eu/vuln/ubuntu-cve-2026-112060