CVE-2026-121625 GNU Gatekeeper before 5.16 Out-of-Bounds Read via RTCP SDES Parsing

GNU Gatekeeper gnugk before 5.16 contains an out-of-bounds read vulnerability in ParseRTCP in ProxyChannel.cxx that allows remote RTP peers to read heap memory past received packets. Attackers can send RTCP SDES items lacking a NUL byte to the media proxy port during proxied H.323 calls with...

CVE-2026-121625

GNU Gatekeeper (gnugk) versions before 5.16 are vulnerable to an out-of-bounds read in the ParseRTCP() function located in ProxyChannel.cxx. The root cause is triggered when remote RTP peers send RTCP SDES items that lack a NUL byte. This occurs during proxied H.323 calls when EnableRTCPStats is ...

CVE-2026-73153

A flaw was found in svxlink's EchoLink implementation. An out-of-bounds read in the RTCP/SDES packet handling allows a pre-authentication remote attacker to read beyond buffer boundaries via crafted UDP packets, potentially leading to information disclosure or a crash. Mitigation Update svxlink t...

PT-2026-80189

GHSA-624p-cp8x-6hp6: EchoLink RTCP/SDES: out-of-bounds read...

CVE-2024-34590

Improper input validation혻in parsing an item type from RTCP SDES packet in librtp.so prior to SMR Jul-2024 Release 1 allows remote attackers to trigger temporary denial of service. User interaction is required for triggering this vulnerability...

CVE-2024-34591

Improper input validation in parsing an item data from RTCP SDES packet in librtp.so prior to SMR Jul-2024 Release 1 allows remote attackers to trigger temporary denial of service. User interaction is required for triggering this vulnerability...

EUVD-2024-34892

Malicious code in bioql PyPI...

EUVD-2024-34890

Malicious code in bioql PyPI...

EUVD-2024-34891

Malicious code in bioql PyPI...

CVE-2024-34592

Improper input validation in parsing RTCP SDES packet in librtp.so prior to SMR Jul-2024 Release 1 allows remote attackers to trigger temporary denial of service. User interaction is required for triggering this vulnerability...

CVE-2024-34592

Improper input validation in parsing RTCP SDES packet in librtp.so prior to SMR Jul-2024 Release 1 allows remote attackers to trigger temporary denial of service. User interaction is required for triggering this vulnerability...

CVE-2024-34591

Improper input validation in parsing an item data from RTCP SDES packet in librtp.so prior to SMR Jul-2024 Release 1 allows remote attackers to trigger temporary denial of service. User interaction is required for triggering this vulnerability...

CVE-2024-34590

Improper input validation혻in parsing an item type from RTCP SDES packet in librtp.so prior to SMR Jul-2024 Release 1 allows remote attackers to trigger temporary denial of service. User interaction is required for triggering this vulnerability...

CVE-2024-34591

Improper input validation in parsing an item data from RTCP SDES packet in librtp.so prior to SMR Jul-2024 Release 1 allows remote attackers to trigger temporary denial of service. User interaction is required for triggering this vulnerability...

CVE-2024-34592

Improper input validation in parsing RTCP SDES packet in librtp.so prior to SMR Jul-2024 Release 1 allows remote attackers to trigger temporary denial of service. User interaction is required for triggering this vulnerability...

CVE-2024-34592

Summary: CVE-2024-34592 affects librtp.so prior to SMR Jul-2024 Release 1 due to improper input validation when parsing RTCP SDES packets. This can allow a remote attacker to trigger a temporary denial of service, with user interaction required. Affected versions: librtp.so before SMR Jul-2024 Re...

CVE-2024-34592

Improper input validation in parsing RTCP SDES packet in librtp.so prior to SMR Jul-2024 Release 1 allows remote attackers to trigger temporary denial of service. User interaction is required for triggering this vulnerability...

CVE-2024-34591

Improper input validation in parsing an item data from RTCP SDES packet in librtp.so prior to SMR Jul-2024 Release 1 allows remote attackers to trigger temporary denial of service. User interaction is required for triggering this vulnerability...

CVE-2024-34591

The connected PT-2024-26006 entry confirms a concrete vulnerability in librtp.so (pre-SMR Jul-2024 Release 1) related to improper input validation when parsing item data from RTCP SDES packets. The root cause is input validation weaknesses in the RTCP SDES item parsing, which can be exploited rem...

CVE-2024-34590

Improper input validation혻in parsing an item type from RTCP SDES packet in librtp.so prior to SMR Jul-2024 Release 1 allows remote attackers to trigger temporary denial of service. User interaction is required for triggering this vulnerability...