handoff

Pion Handoff 在浏览器中创建 WebRTC 会话——在其他地方运行它 为什么 WebRTC 是用于实时媒体流传输的实时通信技术。用于 Google Meet、Discord 和 Zoom 等网页应用。 使用 Handoff，你在浏览器中创建 WebRTC 会话，然后将其移动到你控制的进程中。这可以让你做一些有趣的事情。 录制 - 通过 handoff 加入 Zoom 通话，并在媒体通过时保存它。 发送 - 使用 FFmpeg 或发送外部源。不受浏览器质量/采集编解码器的限制。 逆向工程 - 捕获 ICE/DTLS 以及解密的 RTP/RTCP/SCTP 流量。...

whitelist-bypass

Omisión de Lista Blanca Tuneliza el tráfico de internet a través de plataformas de videollamadas VK Call, Yandex Telemost, WB Stream para eludir la censura de listas blancas gubernamentales. Configuración Guía de configuración paso a paso en ruso: docs/SETUP.md Cómo funciona Hay dos modos de túne...

SUSE CVE-2026-54908

Pion DTLS is a Go implementation of Datagram Transport Layer Security. Versions prior to 3.1.4 are vulnerable to Remote Denial of Service via panic while parsing a crafted ECDHEPSK ServerKeyExchange message. This issue has been fixed in version 3.1.4...

SUSE CVE-2026-54909

pion/stun is a Go implementation of STUN. Prior to 3.1.3, XORMappedAddress.GetFromAs can panic while parsing a malformed short XOR-MAPPED-ADDRESS attribute in STUN or ICE Binding-response parsing paths, allowing remote denial of service. This issue is fixed in version 3.1.3...

GO-2026-6163 Panic on malformed XOR-MAPPED-ADDRESS attribute in github.com/pion/stun/v3

In github.com/pion/stun/v3 before 3.1.5, XORMappedAddress.GetFromAs reads the address family header from an XOR-MAPPED-ADDRESS attribute before validating the attribute length. Parsing a malformed STUN message carrying a zero-length XOR-MAPPED-ADDRESS attribute from a tightly sized buffer causes ...

GO-2026-6165 Panic while parsing crafted ECDHE_PSK ServerKeyExchange in github.com/pion/dtls/v3

In github.com/pion/dtls/v3 before 3.1.4, MessageServerKeyExchange.Unmarshal does not verify that data remains after parsing the PSK identity hint when handling ECDHEPSK key exchange messages. A remote peer sending a crafted ServerKeyExchange message where the PSK hint consumes all remaining data...

Remote Denial Of Service (Dos)

github.com/pion/dtls is vulnerable to Remote Denial of Service Dos. The vulnerability is due to improper parsing of a crafted ECDHEPSK ServerKeyExchange message, which allows a remote attacker to trigger a panic...

Improper Input Validation

pion/stun is vulnerable to Improper Input Validation. The vulnerability is due to insufficient validation of malformed short XOR-MAPPED-ADDRESS attributes in XORMappedAddress.GetFromAs, which allows a remote attacker to trigger a panic by sending specially crafted STUN or ICE Binding responses...

Linux Distros Unpatched Vulnerability : CVE-2026-54909

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - pion/stun is a Go implementation of STUN. Prior to 3.1.3, XORMappedAddress.GetFromAs can panic while parsing a malformed short XOR-MAPPED-ADDRESS attribute in...

DEBIAN-CVE-2026-54909

pion/stun is a Go implementation of STUN. Prior to 3.1.3, XORMappedAddress.GetFromAs can panic while parsing a malformed short XOR-MAPPED-ADDRESS attribute in STUN or ICE Binding-response parsing paths, allowing remote denial of service. This issue is fixed in version 3.1.3...

CVE-2026-54909

pion/stun is a Go implementation of STUN. Prior to 3.1.3, XORMappedAddress.GetFromAs can panic while parsing a malformed short XOR-MAPPED-ADDRESS attribute in STUN or ICE Binding-response parsing paths, allowing remote denial of service. This issue is fixed in version 3.1.3...

CVE-2026-54909

pion/stun is a Go implementation of STUN. Prior to 3.1.3, XORMappedAddress.GetFromAs can panic while parsing a malformed short XOR-MAPPED-ADDRESS attribute in STUN or ICE Binding-response parsing paths, allowing remote denial of service. This issue is fixed in version 3.1.3...

GHSA-WG4G-WM44-CH5J Pion DTLS vulnerable to denial of service via panic while parsing a crafted ECDHE_PSK ServerKeyExchange message

Impact Remote denial of service via panic while parsing a crafted ECDHEPSK ServerKeyExchange message. Patches Upgrade to v3.1.4 or later. This version includes this patch https://github.com/pion/dtls/pull/839 which fixes the issue. Workarounds No work around; please upgrade to v3.1.4 or a newer...

EUVD-2026-41133

Pion DTLS vulnerable to denial of service via panic while parsing a crafted ECDHEPSK ServerKeyExchange message...

Pion DTLS vulnerable to denial of service via panic while parsing a crafted ECDHE_PSK ServerKeyExchange message

Impact Remote denial of service via panic while parsing a crafted ECDHEPSK ServerKeyExchange message. Patches Upgrade to v3.1.4 or later. This version includes this patch https://github.com/pion/dtls/pull/839 which fixes the issue. Workarounds No work around; please upgrade to v3.1.4 or a newer...

CVE-2026-54909

CVE-2026-54909 affects the Go library pion/stun. The vulnerability arises when parsing a malformed short XOR-MAPPED-ADDRESS attribute in STUN/ICE Binding responses, where XORMappedAddress.GetFromAs can panic. This leads to a remote denial of service. The issue is fixed in version 3.1.3; upgrading...

CVE-2026-54909 Pion STUN vulnerable to remote denial of service via panic while parsing a malformed XOR-MAPPED-ADDRESS attribute

pion/stun is a Go implementation of STUN. Prior to 3.1.3, XORMappedAddress.GetFromAs can panic while parsing a malformed short XOR-MAPPED-ADDRESS attribute in STUN or ICE Binding-response parsing paths, allowing remote denial of service. This issue is fixed in version 3.1.3...

CVE-2026-54909 Pion STUN vulnerable to remote denial of service via panic while parsing a malformed XOR-MAPPED-ADDRESS attribute

pion/stun is a Go implementation of STUN. Prior to 3.1.3, XORMappedAddress.GetFromAs can panic while parsing a malformed short XOR-MAPPED-ADDRESS attribute in STUN or ICE Binding-response parsing paths, allowing remote denial of service. This issue is fixed in version 3.1.3...

CVE-2026-54909

pion/stun is a Go implementation of STUN. Prior to 3.1.3, XORMappedAddress.GetFromAs can panic while parsing a malformed short XOR-MAPPED-ADDRESS attribute in STUN or ICE Binding-response parsing paths, allowing remote denial of service. This issue is fixed in version 3.1.3...

CVE-2026-54909 Pion STUN vulnerable to remote denial of service via panic while parsing a malformed XOR-MAPPED-ADDRESS attribute

pion/stun is a Go implementation of STUN. Prior to 3.1.3, XORMappedAddress.GetFromAs can panic while parsing a malformed short XOR-MAPPED-ADDRESS attribute in STUN or ICE Binding-response parsing paths, allowing remote denial of service. This issue is fixed in version 3.1.3...