CVE-2024-24260

CVE-2024-24260 refers to a Use-After-Free (UAF) in media-server v1.0.0, triggered via the function sip_subscribe_remove in /uac/sip-uac-subscribe.c. The issue is described consistently across multiple sources (NVD, Red Hat, OSV, CVE lists) as a memory corruption vulnerability with an impact on av...

CVE-2024-24262

CVE-2024-24262 affects media-server v1.0.0 with a Use-After-Free in sip_uac_stop_timer ( /uac/sip-uac-transaction.c ). Root cause: UAF in the timer handling path. Impact stated as high availability risk (network-exposed, no authentication, no user interaction). Exploitation details are not provid...