CVE-2026-56387

The Apache bRPC RTMP AMF parser is vulnerable to remote memory exhaustion because it accepts 32-bit string lengths and array counts directly from untrusted input. Specifically, the AMF long string parser resizes the destination string to the declared length before verifying the stream contents, w...

CVE-2026-56387 Apache bRPC: Remote Memory Exhaustion in RTMP AMF Parser

The RTMP AMF parser in Apache bRPC accepts AMF string lengths and array counts directly from untrusted input. A remote unauthenticated attacker who can reach a bRPC server with RTMP enabled can send a small AMF payload with an excessive declared long string length or array count, causing excessiv...