CVE-2026-104074

The Coturn software (version 4.10.0 ) is vulnerable to an uninitialized stack memory disclosure vulnerability. An unauthenticated remote attacker can leak stack memory contents by sending a TURN Allocate request without credentials. The flaw exists in the stun_init_error_response_common_str() fun...