CVE-2026-112061

A flaw was found in rtmpdump. This vulnerability allows a remote attacker, acting as a malicious server or intercepting network traffic, to cause a Denial of Service DoS. By sending a specially crafted Action Message Format AMF payload with truncated array data, the attacker triggers a heap-based...

CVE-2026-112060

A flaw was found in rtmpdump. A malicious Real-Time Messaging Protocol RTMP server or an attacker intercepting network communications can exploit this issue by transmitting crafted Action Message Format AMF3 data with oversized string lengths. Because the library fails to properly handle decoding...

Linux Distros Unpatched Vulnerability : CVE-2026-112060

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - librtmp in RTMPDump through 2.6 contains an out-of-bounds read and heap out-of-bounds write vulnerability because AMF3Decode ignores AMF3 property decode...

CVE-2026-112061

librtmp RTMPDump through 2.6 contains a heap out-of-bounds read vulnerability in AMFPropDecode that reads an AMF0 strict-array element count before checking that four bytes remain. A malicious RTMP server or man in the middle can send an AMF0 body ending with a strict-array type byte and fewer th...

DEBIAN-CVE-2026-112060

librtmp in RTMPDump through 2.6 contains an out-of-bounds read and heap out-of-bounds write vulnerability because AMF3Decode ignores AMF3 property decode failures. Malicious RTMP servers or man-in-the-middle attackers can send oversized AMF3 string lengths, and with the token option DecodeTEA...

DEBIAN-CVE-2026-112061

librtmp RTMPDump through 2.6 contains a heap out-of-bounds read vulnerability in AMFPropDecode that reads an AMF0 strict-array element count before checking that four bytes remain. A malicious RTMP server or man in the middle can send an AMF0 body ending with a strict-array type byte and fewer th...

CVE-2026-112060

librtmp in RTMPDump through 2.6 contains an out-of-bounds read and heap out-of-bounds write vulnerability because AMF3Decode ignores AMF3 property decode failures. Malicious RTMP servers or man-in-the-middle attackers can send oversized AMF3 string lengths, and with the token option DecodeTEA...

UBUNTU-CVE-2026-112060

librtmp in RTMPDump through 2.6 contains an out-of-bounds read and heap out-of-bounds write vulnerability because AMF3Decode ignores AMF3 property decode failures. Malicious RTMP servers or man-in-the-middle attackers can send oversized AMF3 string lengths, and with the token option DecodeTEA...

UBUNTU-CVE-2026-112061

librtmp RTMPDump through 2.6 contains a heap out-of-bounds read vulnerability in AMFPropDecode that reads an AMF0 strict-array element count before checking that four bytes remain. A malicious RTMP server or man in the middle can send an AMF0 body ending with a strict-array type byte and fewer th...

CVE-2026-112060

librtmp in RTMPDump through 2.6 contains an out-of-bounds read and heap out-of-bounds write vulnerability because AMF3Decode ignores AMF3 property decode failures. Malicious RTMP servers or man-in-the-middle attackers can send oversized AMF3 string lengths, and with the token option DecodeTEA...

CVE-2026-112061

librtmp RTMPDump through 2.6 contains a heap out-of-bounds read vulnerability in AMFPropDecode that reads an AMF0 strict-array element count before checking that four bytes remain. A malicious RTMP server or man in the middle can send an AMF0 body ending with a strict-array type byte and fewer th...

CVE-2026-112061 librtmp (RTMPDump) through 2.6 Heap Out-of-Bounds Read via AMFProp_Decode

librtmp RTMPDump through 2.6 contains a heap out-of-bounds read vulnerability in AMFPropDecode that reads an AMF0 strict-array element count before checking that four bytes remain. A malicious RTMP server or man in the middle can send an AMF0 body ending with a strict-array type byte and fewer th...

CVE-2026-112061 librtmp (RTMPDump) through 2.6 Heap Out-of-Bounds Read via AMFProp_Decode

librtmp RTMPDump through 2.6 contains a heap out-of-bounds read vulnerability in AMFPropDecode that reads an AMF0 strict-array element count before checking that four bytes remain. A malicious RTMP server or man in the middle can send an AMF0 body ending with a strict-array type byte and fewer th...

EUVD-2026-103503

librtmp RTMPDump through 2.6 contains a heap out-of-bounds read vulnerability in AMFPropDecode that reads an AMF0 strict-array element count before checking that four bytes remain. A malicious RTMP server or man in the middle can send an AMF0 body ending with a strict-array type byte and fewer th...

CVE-2026-112061

librtmp RTMPDump through 2.6 contains a heap out-of-bounds read vulnerability in AMFPropDecode that reads an AMF0 strict-array element count before checking that four bytes remain. A malicious RTMP server or man in the middle can send an AMF0 body ending with a strict-array type byte and fewer th...

CVE-2026-112061

librtmp (RTMPDump) versions through 2.6 are vulnerable to a heap out-of-bounds read in the AMFProp_Decode function. The flaw exists because the software reads an AMF0 strict-array element count before verifying that at least four bytes remain in the buffer. A malicious RTMP server or a man-in-the...

CVE-2026-112060

librtmp in RTMPDump through 2.6 contains an out-of-bounds read and heap out-of-bounds write vulnerability because AMF3Decode ignores AMF3 property decode failures. Malicious RTMP servers or man-in-the-middle attackers can send oversized AMF3 string lengths, and with the token option DecodeTEA...

CVE-2026-112060

The librtmp library in RTMPDump versions through 2.6 is vulnerable to an out-of-bounds read and heap out-of-bounds write vulnerability. The root cause is that AMF3_Decode ignores AMF3 property decode failures. A malicious RTMP server or a man-in-the-middle attacker can exploit this by sending ove...

CVE-2026-112060 librtmp (RTMPDump) through 2.6 Heap Out-of-Bounds Write via AMF3_Decode

librtmp in RTMPDump through 2.6 contains an out-of-bounds read and heap out-of-bounds write vulnerability because AMF3Decode ignores AMF3 property decode failures. Malicious RTMP servers or man-in-the-middle attackers can send oversized AMF3 string lengths, and with the token option DecodeTEA...

EUVD-2026-103522

librtmp in RTMPDump through 2.6 contains an out-of-bounds read and heap out-of-bounds write vulnerability because AMF3Decode ignores AMF3 property decode failures. Malicious RTMP servers or man-in-the-middle attackers can send oversized AMF3 string lengths, and with the token option DecodeTEA...