CVE-2026-56387

The Apache bRPC RTMP AMF parser is vulnerable to remote memory exhaustion because it accepts 32-bit string lengths and array counts directly from untrusted input. Specifically, the AMF long string parser resizes the destination string to the declared length before verifying the stream contents, w...