EUVD-2026-112490

OvenMediaEngine through 0.21.0 contains a denial of service vulnerability in OvtPacket::LoadHeader that allows unauthenticated attackers to stall connections by sending payloadlength values above 32750. Attackers can send crafted OVT packets to the OVT listener to hold connections open indefinite...

CVE-2026-118689

OvenMediaEngine versions through 0.21.0 are vulnerable to a Denial of Service (DoS) attack due to a flaw in the OvtPacket::LoadHeader() function. Unauthenticated attackers can exploit this by sending crafted OVT packets with payload_length values exceeding 32750 . This allows the attacker to stal...