27 matches found
CVE-2026-56387
The RTMP AMF parser in Apache bRPC accepts AMF string lengths and array counts directly from untrusted input. A remote unauthenticated attacker who can reach a bRPC server with RTMP enabled can send a small AMF payload with an excessive declared long string length or array count, causing excessiv...
CVE-2026-54427
Uncontrolled recursion in the AMF parser in Apache bRPC 1.18.0 allows a remote RTMP peer to crash a bRPC process by sending deeply nested AMF objects or arrays. The parser recursively processed nested AMF containers without enforcing a depth limit, which could exhaust the native stack. Affected...
CVE-2026-56387 Apache bRPC: Remote Memory Exhaustion in RTMP AMF Parser
The RTMP AMF parser in Apache bRPC accepts AMF string lengths and array counts directly from untrusted input. A remote unauthenticated attacker who can reach a bRPC server with RTMP enabled can send a small AMF payload with an excessive declared long string length or array count, causing excessiv...
CVE-2026-56387
The RTMP AMF parser in Apache bRPC versions prior to 1.18.0 is vulnerable to a resource management error. The parser accepts AMF string lengths and array counts directly from untrusted input, resizing destination strings to a 32-bit length before validating the actual stream content. This allows ...
EUVD-2026-107173
The RTMP AMF parser in Apache bRPC accepts AMF string lengths and array counts directly from untrusted input. A remote unauthenticated attacker who can reach a bRPC server with RTMP enabled can send a small AMF payload with an excessive declared long string length or array count, causing excessiv...
CVE-2026-54427 Apache bRPC: Stack Exhaustion via Unbounded Recursion in AMF Parser
Uncontrolled recursion in the AMF parser in Apache bRPC 1.18.0 allows a remote RTMP peer to crash a bRPC process by sending deeply nested AMF objects or arrays. The parser recursively processed nested AMF containers without enforcing a depth limit, which could exhaust the native stack. Affected...
EUVD-2026-107171
Uncontrolled recursion in the AMF parser in Apache bRPC 1.18.0 allows a remote RTMP peer to crash a bRPC process by sending deeply nested AMF objects or arrays. The parser recursively processed nested AMF containers without enforcing a depth limit, which could exhaust the native stack. Affected...
CVE-2026-54427
Apache bRPC versions prior to 1.18.0 are vulnerable to a stack exhaustion attack due to uncontrolled recursion in the AMF parser. The parser fails to enforce a depth limit when processing nested AMF containers, allowing a remote RTMP peer to crash the bRPC process by sending deeply nested AMF obj...
PT-2026-120532
The RTMP AMF parser in Apache bRPC accepts AMF string lengths and array counts directly from untrusted input. A remote unauthenticated attacker who can reach a bRPC server with RTMP enabled can send a small AMF payload with an excessive declared long string length or array count, causing excessiv...
PT-2026-120530
Uncontrolled recursion in the AMF parser in Apache bRPC 1.18.0 allows a remote RTMP peer to crash a bRPC process by sending deeply nested AMF objects or arrays. The parser recursively processed nested AMF containers without enforcing a depth limit, which could exhaust the native stack. Affected...
Apache bRPC resource management error vulnerability
Versions of Apache bRPC prior to 1.18.0 contain a resource management error vulnerability. This vulnerability stems from uncontrolled recursion in the AMF parser; when processing nested AMF containers, there is no enforced limit on recursion depth. Remote RTMP endpoints sending deeply nested AMF...
Apache bRPC resource management error vulnerability
Versions of Apache bRPC prior to 1.18.0 contain a resource management error vulnerability. This vulnerability arises because the RTMP AMF parser directly accepts untrusted input: the length of AMF strings and the count of array elements are unchecked. Before validating byte counts within the...
EUVD-2021-32564
Malicious code in bioql PyPI...
Linux Distros Unpatched Vulnerability : CVE-2021-45846
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A flaw in the AMF parser of Slic3r libslic3r 1.3.0 allows an attacker to cause an application crash using a crafted AMF document, where a metadata tag lacks a...
Slic3r Denial of Service Vulnerability (CNVD-2022-67486)
slic3r is a slic3r open source 3D printing toolkit used to convert various 3-D print model file types to printer-specific machine code. slic3r version 1.3.0 has a denial-of-service vulnerability in the AMF parser that stems from not properly handling incoming error messages. An attacker could use...
CVE-2021-45846
A flaw in the AMF parser of Slic3r libslic3r 1.3.0 allows an attacker to cause an application crash using a crafted AMF document, where a metadata tag lacks a "type" attribute...
CVE-2021-45846
A flaw in the AMF parser of Slic3r libslic3r 1.3.0 allows an attacker to cause an application crash using a crafted AMF document, where a metadata tag lacks a "type" attribute...
CVE-2021-45846
A flaw in the AMF parser of Slic3r libslic3r 1.3.0 allows an attacker to cause an application crash using a crafted AMF document, where a metadata tag lacks a "type" attribute...
Design/Logic Flaw
A flaw in the AMF parser of Slic3r libslic3r 1.3.0 allows an attacker to cause an application crash using a crafted AMF document, where a metadata tag lacks a "type" attribute...
