Remote Temporary Denial of Service Vulnerability in librtp.so Prior to SMR Jul-2024 Release 1

CVE-2024-34591

4.3MEDIUM

Key Information

Vendor: librtp.so
Status: Android
Vendor: CVE Published:; 2 July 2024

Summary

Improper input validation in parsing an item data from RTCP SDES packet in librtp.so prior to SMR Jul-2024 Release 1 allows remote attackers to trigger temporary denial of service. User interaction is required for triggering this vulnerability.

CVSS V3.1

Score:

4.3

Severity:

MEDIUM

Confidentiality:

None

Integrity:

None

Availability:

Low

Attack Vector:

Network

Attack Complexity:

Low

Privileges Required:

None

User Interaction:

Required

Scope:

Unchanged

Timeline

Vulnerability published.
Jul 2, 2024

Collectors

NVD Database