83 matches found
CVE-2026-112061
librtmp RTMPDump through 2.6 contains a heap out-of-bounds read vulnerability in AMFPropDecode that reads an AMF0 strict-array element count before checking that four bytes remain. A malicious RTMP server or man in the middle can send an AMF0 body ending with a strict-array type byte and fewer th...
CVE-2026-112060
librtmp in RTMPDump through 2.6 contains an out-of-bounds read and heap out-of-bounds write vulnerability because AMF3Decode ignores AMF3 property decode failures. Malicious RTMP servers or man-in-the-middle attackers can send oversized AMF3 string lengths, and with the token option DecodeTEA...
EUVD-2026-103503
librtmp RTMPDump through 2.6 contains a heap out-of-bounds read vulnerability in AMFPropDecode that reads an AMF0 strict-array element count before checking that four bytes remain. A malicious RTMP server or man in the middle can send an AMF0 body ending with a strict-array type byte and fewer th...
CVE-2026-112061
librtmp RTMPDump through 2.6 contains a heap out-of-bounds read vulnerability in AMFPropDecode that reads an AMF0 strict-array element count before checking that four bytes remain. A malicious RTMP server or man in the middle can send an AMF0 body ending with a strict-array type byte and fewer th...
CVE-2026-112061 librtmp (RTMPDump) through 2.6 Heap Out-of-Bounds Read via AMFProp_Decode
librtmp RTMPDump through 2.6 contains a heap out-of-bounds read vulnerability in AMFPropDecode that reads an AMF0 strict-array element count before checking that four bytes remain. A malicious RTMP server or man in the middle can send an AMF0 body ending with a strict-array type byte and fewer th...
CVE-2026-112061
librtmp (RTMPDump) versions through 2.6 are vulnerable to a heap out-of-bounds read in the AMFProp_Decode function. The flaw exists because the software reads an AMF0 strict-array element count before verifying that at least four bytes remain in the buffer. A malicious RTMP server or a man-in-the...
CVE-2026-112060
librtmp in RTMPDump through 2.6 contains an out-of-bounds read and heap out-of-bounds write vulnerability because AMF3Decode ignores AMF3 property decode failures. Malicious RTMP servers or man-in-the-middle attackers can send oversized AMF3 string lengths, and with the token option DecodeTEA...
EUVD-2026-103522
librtmp in RTMPDump through 2.6 contains an out-of-bounds read and heap out-of-bounds write vulnerability because AMF3Decode ignores AMF3 property decode failures. Malicious RTMP servers or man-in-the-middle attackers can send oversized AMF3 string lengths, and with the token option DecodeTEA...
CVE-2026-112060
The librtmp library in RTMPDump versions through 2.6 is vulnerable to an out-of-bounds read and heap out-of-bounds write vulnerability. The root cause is that AMF3_Decode ignores AMF3 property decode failures. A malicious RTMP server or a man-in-the-middle attacker can exploit this by sending ove...
CVE-2026-112060 librtmp (RTMPDump) through 2.6 Heap Out-of-Bounds Write via AMF3_Decode
librtmp in RTMPDump through 2.6 contains an out-of-bounds read and heap out-of-bounds write vulnerability because AMF3Decode ignores AMF3 property decode failures. Malicious RTMP servers or man-in-the-middle attackers can send oversized AMF3 string lengths, and with the token option DecodeTEA...
EUVD-2015-8158
Malware in sbrugna...
EUVD-2015-8159
Malware in sbrugna...
EUVD-2015-8160
Malware in sbrugna...
Multiple rtmpdump vulnerabilities
The version of rtmpdump contained in this package has multiple known vulnerabilities. Patches This package is abandoned and should not be used anymore. There is no patched release. Workarounds You should install rmtpdump from another source. References...
Access of Uninitialized Pointer
Overview Affected versions of this package are vulnerable to Access of Uninitialized Pointer in the AMF3CDAddProp function in amf.c which allows attackers to trigger an exploitable crash. Remediation There is no fixed version for rudloff/rtmpdump-bin. References - Talos Vulnerability Report -...
GHSA-VRPV-VW92-328G Multiple rtmpdump vulnerabilities
The version of rtmpdump contained in this package has multiple known vulnerabilities. Patches This package is abandoned and should not be used anymore. There is no patched release. Workarounds You should install rmtpdump from another source. References...
Access of Uninitialized Pointer
Overview Affected versions of this package are vulnerable to Access of Uninitialized Pointer in the AMF3ReadString function in amf.c. Remediation There is no fixed version for rudloff/rtmpdump-bin. References - Talos Vulnerability Report - Vulnerable Code Credit: Dave McDaniel...
PT-2025-6216 · Rtmpdump · Rtmpdump
Name of the Vulnerable Software and Affected Versions: rtmpdump affected versions not specified Description: The version of rtmpdump contained in the package has multiple known issues. There is no patched release available. It is recommended to install rtmpdump from another source. Recommendation...
