CVE-2026-112061

librtmp (RTMPDump) versions through 2.6 are vulnerable to a heap out-of-bounds read in the AMFProp_Decode function. The flaw exists because the software reads an AMF0 strict-array element count before verifying that at least four bytes remain in the buffer. A malicious RTMP server or a man-in-the...