CVE-2026-118689

OvenMediaEngine versions through 0.21.0 are vulnerable to a Denial of Service (DoS) attack due to a flaw in the OvtPacket::LoadHeader() function. Unauthenticated attackers can exploit this by sending crafted OVT packets with payload_length values exceeding 32750 . This allows the attacker to stal...