CVE-2026-1110

Katalog CVE

CVSS 7.8 · High EPSS 0,30%

Kerentanan Improper Restriction of Operations within the Bounds of a Memory Buffer pada cijliu librtsp. Skor CVSS 3.1 7.8 (High) menurut NVD.

Deskripsi (NVD)

A flaw has been found in cijliu librtsp up to 2ec1a81ad65280568a0c7c16420d7c10fde13b04. This affects the function rtsp_parse_method. This manipulation causes buffer overflow. It is possible to launch the attack on the local host. Continious delivery with rolling releases is used by this product. Therefore, no version details of affected nor updated releases are available. The vendor was contacted early about this disclosure but did not respond in any way.

Rincian

Terbit di NVD

18 Januari 2026

Terakhir diubah

17 Juni 2026

Status NVD

Analyzed

CVSS 3.1

7.8 (High), sumber NVD
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer
CWE-120: Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')

EPSS (30 hari)

0,30% peluang dieksploitasi; lebih tinggi dari 20,8% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://github.com/fizz-is-on-the-way/vuls_protocol/blob/main/librtsp_rtsp_parse_method/librtsp_rtsp_parse_met... exploit · advisory pihak ketiga
• https://vuldb.com/?id.341702 advisory pihak ketiga · vdb entry
• https://vuldb.com/?submit.732603 advisory pihak ketiga · vdb entry
• https://vuldb.com/?ctiid.341702 permissions required · vdb entry