CVE-2026-122126

The reSIProcate reTurn client through 1.14.0 is vulnerable to a heap buffer overflow in the TurnTcpSocket::handleReadHeader() function. This flaw allows a malicious TURN server to trigger memory overwrites by sending STUN or ChannelData frames with oversized lengths (up to 65,535 bytes). The over...

EUVD-2026-117081

reSIProcate reTurn client through 1.14.0 contains a heap buffer overflow in TurnTcpSocket::handleReadHeader that allows malicious TURN servers to overwrite memory via oversized frame lengths. Attackers can send STUN or ChannelData frames declaring up to 65535 bytes, writing roughly 57 KB past the...