CVE-2026-121625 GNU Gatekeeper before 5.16 Out-of-Bounds Read via RTCP SDES Parsing

GNU Gatekeeper gnugk before 5.16 contains an out-of-bounds read vulnerability in ParseRTCP in ProxyChannel.cxx that allows remote RTP peers to read heap memory past received packets. Attackers can send RTCP SDES items lacking a NUL byte to the media proxy port during proxied H.323 calls with...

EUVD-2026-116100

GNU Gatekeeper gnugk before 5.16 contains an out-of-bounds read vulnerability in ParseRTCP in ProxyChannel.cxx that allows remote RTP peers to read heap memory past received packets. Attackers can send RTCP SDES items lacking a NUL byte to the media proxy port during proxied H.323 calls with...

CVE-2026-121625

GNU Gatekeeper (gnugk) versions before 5.16 are vulnerable to an out-of-bounds read in the ParseRTCP() function located in ProxyChannel.cxx. The root cause is triggered when remote RTP peers send RTCP SDES items that lack a NUL byte. This occurs during proxied H.323 calls when EnableRTCPStats is ...