Live › vulnerability › CVE-2026-112061
Go to dashboardlibrtmp (RTMPDump) through 2.6 reads an AMF0 strict-array element count in AMFProp_Decode before checking that four bytes remain, a heap out-of-bounds read. A malicious RTMP server or man-in-the-middle can send a crafted AMF0 body to crash the client.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-23 21:57 UTC. All times on this page are UTC.
Applications that use librtmp (RTMPDump) to connect to RTMP servers, especially ones that accept untrusted or attacker-reachable RTMP streams. Systems that never open RTMP connections to outside servers are unlikely to be exposed. The sources do not say whether any specific distribution or downstream product is affected.
No product ranges from the sources yet.
ldd on the binary or pkg-config --modversion librtmp on the build hostEach row is the first time that source carried this signal. The analyst’s rows are its own findings.
librtmp (RTMPDump) through 2.6 contains a heap out-of-bounds read vulnerability in AMFProp_Decode that reads an AMF0 strict-array element count before checking that four bytes remain. A malicious RTMP server or man in the middle can send an AMF0 body ending with a strict-array type byte and fewer than four trailing bytes to crash the client.
This page as .md · .json · in your agent: get_signal("CVE-2026-112061")
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.