CVE-2026-74758

A heap use-after-free in the RTMP protocol component of Apache bRPC versions 1.18.0 allows a remote attacker to crash a bRPC RTMP server by sending a crafted Abort control message. No authentication or application-level request is required. Root Cause: When an RTMP Abort control message names the...

EUVD-2026-107182

A heap use-after-free in the RTMP protocol component of Apache bRPC versions 1.18.0 allows a remote attacker to crash a bRPC RTMP server by sending a crafted Abort control message. No authentication or application-level request is required. Root Cause: When an RTMP Abort control message names the...

CVE-2026-74758 Apache bRPC: Heap Use-After-Free in RTMP Abort Message Handling

A heap use-after-free in the RTMP protocol component of Apache bRPC versions 1.18.0 allows a remote attacker to crash a bRPC RTMP server by sending a crafted Abort control message. No authentication or application-level request is required. Root Cause: When an RTMP Abort control message names the...

CVE-2026-74758

Apache bRPC (versions

PT-2026-120540

A heap use-after-free in the RTMP protocol component of Apache bRPC versions 1.18.0 allows a remote attacker to crash a bRPC RTMP server by sending a crafted Abort control message. No authentication or application-level request is required. Root Cause: When an RTMP Abort control message names the...