Live › vulnerability › CVE-2026-121626
GNU Gatekeeper (gnugk) before 5.16 has an out-of-bounds read in its H.460.24 probing code, triggered by a short RTCP packet sent to the media port. A remote attacker can read past a heap allocation and possibly crash the gatekeeper.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-11-03 18:22 UTC. All times on this page are UTC.
Operators running GNU Gatekeeper before 5.16 that accept H.323 traffic and use H.460.24 probing on the media port are exposed. The flaw is reachable remotely by sending short probe packets, so internet-facing or untrusted-network gatekeepers are the priority. Deployments without H.460.24 or that are not reachable from untrusted networks can deprioritize it.
No product ranges from the sources yet.
gnugk --version or the package manager's version query).5.16 or later (per the sources' 'before 5.16' range).Each row is the first time that source carried this signal. The analyst’s rows are its own findings.
GNU Gatekeeper (gnugk) before 5.16 contains an out-of-bounds read vulnerability in H46024Socket::ReceivedProbePacket() that allows remote attackers to cause a heap over-read by sending short probe packets. Attackers can send a short application-defined RTCP packet to the media port during H.460.24 probing to read past the heap allocation and possibly crash the gatekeeper.
This page as .md · .json · in your agent: get_signal("CVE-2026-121626")
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.