Use-After-Free Vulnerability in Apache bRPC RTMP Implementation

CVE-2026-84727

What is CVE-2026-84727?

A critical use-after-free vulnerability exists within the RTMP protocol implementation of Apache bRPC versions prior to 1.18.0. This flaw enables a malicious RTMP peer to crash the server or potentially corrupt memory through a specially crafted Abort message. The issue arises when an RTMP Abort message is processed, leading to the deletion of the RtmpChunkStream object used for serialization concurrently by sender threads. This results in dereferencing a freed object, making applications that utilize the bRPC RTMP protocol vulnerable, particularly when interfacing with untrusted remote peers. To mitigate the risk, users are advised to upgrade to bRPC version 1.18.0 or apply the provided patch.

References