Out-of-Bounds Read and Write in RTMPDump Affects librtmp
CVE-2026-112060
6.1MEDIUM
What is CVE-2026-112060?
The librtmp component of RTMPDump prior to version 2.6 is susceptible to an out-of-bounds read and heap out-of-bounds write. This vulnerability arises when AMF3_Decode fails to properly handle property decode errors, allowing malicious RTMP servers or man-in-the-middle attackers to exploit this weakness. By sending oversized AMF3 string lengths with the DecodeTEA token option, attackers can corrupt heap memory and potentially leak sensitive information, posing risks to system integrity and confidentiality.
Affected Version(s)
librtmp 0 <= 2.6
References
CVSS V4
Score:
6.1
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
Low
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Attack Required:
Physical
Privileges Required:
Undefined
User Interaction:
Unknown
Timeline
Vulnerability published
Vulnerability Reserved
Credit
HaiND from the Post and Telecommunication Institute of Technology