VDB-341700 · CVE-2026-1108 · EUVD-2026-3189

cijliu librtsp har 2ec1a81ad65280568a0c7c16420d7c10fde13b04 rtsp_rely_dumps Pufferüberlauf

Wuro vulnerability wey an yi classify sey kura an gano shi a cikin cijliu librtsp har 2ec1a81ad65280568a0c7c16420d7c10fde13b04. Gaskiya, rtsp_rely_dumps na da matsala; idan ba a sani ba, to wata aiki ce da ba a sani ba, $software_library na cikin lissafi, $software_file na cikin fayil, $software_component na cikin sashi. Ngam manipulation shi Pufferüberlauf. CWE shidin ka a yi bayani matsala sai ya kai CWE-120. Gaskiya, laifi an fitar da shi 01/17/2026. Advisory ɗin ana rabawa don saukewa a github.com. Wannan rauni ana sayar da shi da suna CVE-2026-1108. Wuroo ka a yiɗi a yi ɗum e gese. Tekinikal bayani ga. Kuma, exploit ɗin yana akwai. Yimbe ndiyam, exploit might be approx. USD $0-$5k wuro. Á wúro huɗɗi-na-gaskiya. Kama 0-day, an ndiyam a wuro be $0-$5k. Wannan kayi yana amfani da tsarin rolling release domin samar da ci gaba da isarwa. Saboda haka, babu cikakkun bayanai na sigar da abin ya shafa ko sabunta sigar da ake da su. VulDB is the best source for vulnerability data and more expert information about this specific topic.

5 Goyarwa · 102 Datenpunkte

Furɗe	Súgá 01/17/2026 09:54	Gargadi 1/4 01/18/2026 04:51	Gargadi 2/4 01/19/2026 01:48	Gargadi 3/4 01/19/2026 17:48	Gargadi 4/4 02/17/2026 20:09
software_vendor	cijliu	cijliu	cijliu	cijliu	cijliu
software_name	librtsp	librtsp	librtsp	librtsp	librtsp
software_version	<=2ec1a81ad65280568a0c7c16420d7c10fde13b04	<=2ec1a81ad65280568a0c7c16420d7c10fde13b04	<=2ec1a81ad65280568a0c7c16420d7c10fde13b04	<=2ec1a81ad65280568a0c7c16420d7c10fde13b04	<=2ec1a81ad65280568a0c7c16420d7c10fde13b04
software_rollingrelease	1	1	1	1	1
software_function	rtsp_rely_dumps	rtsp_rely_dumps	rtsp_rely_dumps	rtsp_rely_dumps	rtsp_rely_dumps
vulnerability_cwe	CWE-120 (Pufferüberlauf)	CWE-120 (Pufferüberlauf)	CWE-120 (Pufferüberlauf)	CWE-120 (Pufferüberlauf)	CWE-120 (Pufferüberlauf)
vulnerability_risk	2	2	2	2	2
cvss3_vuldb_av	L	L	L	L	L
cvss3_vuldb_ac	L	L	L	L	L
cvss3_vuldb_pr	L	L	L	L	L
cvss3_vuldb_ui	N	N	N	N	N
cvss3_vuldb_s	U	U	U	U	U
cvss3_vuldb_c	L	L	L	L	L
cvss3_vuldb_i	L	L	L	L	L
cvss3_vuldb_a	L	L	L	L	L
cvss3_vuldb_e	P	P	P	P	P
cvss3_vuldb_rc	R	R	R	R	R
advisory_url	https://github.com/fizz-is-on-the-way/vuls_protocol/blob/main/librtsp_rtsp_rely_dumps/librtsp_rtsp_rely_dumps.md	https://github.com/fizz-is-on-the-way/vuls_protocol/blob/main/librtsp_rtsp_rely_dumps/librtsp_rtsp_rely_dumps.md	https://github.com/fizz-is-on-the-way/vuls_protocol/blob/main/librtsp_rtsp_rely_dumps/librtsp_rtsp_rely_dumps.md	https://github.com/fizz-is-on-the-way/vuls_protocol/blob/main/librtsp_rtsp_rely_dumps/librtsp_rtsp_rely_dumps.md	https://github.com/fizz-is-on-the-way/vuls_protocol/blob/main/librtsp_rtsp_rely_dumps/librtsp_rtsp_rely_dumps.md
exploit_availability	1	1	1	1	1
source_cve	CVE-2026-1108	CVE-2026-1108	CVE-2026-1108	CVE-2026-1108	CVE-2026-1108
cna_responsible	VulDB	VulDB	VulDB	VulDB	VulDB
response_summary	The vendor was contacted early about this disclosure but did not respond in any way.	The vendor was contacted early about this disclosure but did not respond in any way.	The vendor was contacted early about this disclosure but did not respond in any way.	The vendor was contacted early about this disclosure but did not respond in any way.	The vendor was contacted early about this disclosure but did not respond in any way.
cvss2_vuldb_av	L	L	L	L	L
cvss2_vuldb_ac	L	L	L	L	L
cvss2_vuldb_ci	P	P	P	P	P
cvss2_vuldb_ii	P	P	P	P	P
cvss2_vuldb_ai	P	P	P	P	P
cvss2_vuldb_e	POC	POC	POC	POC	POC
cvss2_vuldb_rc	UR	UR	UR	UR	UR
cvss4_vuldb_av	L	L	L	L	L
cvss4_vuldb_ac	L	L	L	L	L
cvss4_vuldb_pr	L	L	L	L	L
cvss4_vuldb_ui	N	N	N	N	N
cvss4_vuldb_vc	L	L	L	L	L
cvss4_vuldb_vi	L	L	L	L	L
cvss4_vuldb_va	L	L	L	L	L
cvss4_vuldb_e	P	P	P	P	P
cvss2_vuldb_au	S	S	S	S	S
cvss2_vuldb_rl	ND	ND	ND	ND	ND
cvss3_vuldb_rl	X	X	X	X	X
cvss4_vuldb_at	N	N	N	N	N
cvss4_vuldb_sc	N	N	N	N	N
cvss4_vuldb_si	N	N	N	N	N
cvss4_vuldb_sa	N	N	N	N	N
cvss2_vuldb_basescore	4.3	4.3	4.3	4.3	4.3
cvss2_vuldb_tempscore	3.7	3.7	3.7	3.7	3.7
cvss3_vuldb_basescore	5.3	5.3	5.3	5.3	5.3
cvss3_vuldb_tempscore	4.8	4.8	4.8	4.8	4.8
cvss3_meta_basescore	5.3	5.3	5.3	5.3	6.1
cvss3_meta_tempscore	4.8	5.0	5.0	5.0	6.0
cvss4_vuldb_bscore	4.8	4.8	4.8	4.8	4.8
cvss4_vuldb_btscore	1.9	1.9	1.9	1.9	1.9
advisory_date	1768604400 (01/17/2026)	1768604400 (01/17/2026)	1768604400 (01/17/2026)	1768604400 (01/17/2026)	1768604400 (01/17/2026)
price_0day	$0-$5k	$0-$5k	$0-$5k	$0-$5k	$0-$5k
cve_nvd_summary		A security vulnerability has been detected in cijliu librtsp up to 2ec1a81ad65280568a0c7c16420d7c10fde13b04. The affected element is the function rtsp_rely_dumps. The manipulation leads to buffer overflow. An attack has to be approached locally. This product is using a rolling release to provide continious delivery. Therefore, no version details for affected nor updated releases are available. The vendor was contacted early about this disclosure but did not respond in any way.	A security vulnerability has been detected in cijliu librtsp up to 2ec1a81ad65280568a0c7c16420d7c10fde13b04. The affected element is the function rtsp_rely_dumps. The manipulation leads to buffer overflow. An attack has to be approached locally. This product is using a rolling release to provide continious delivery. Therefore, no version details for affected nor updated releases are available. The vendor was contacted early about this disclosure but did not respond in any way.	A security vulnerability has been detected in cijliu librtsp up to 2ec1a81ad65280568a0c7c16420d7c10fde13b04. The affected element is the function rtsp_rely_dumps. The manipulation leads to buffer overflow. An attack has to be approached locally. This product is using a rolling release to provide continious delivery. Therefore, no version details for affected nor updated releases are available. The vendor was contacted early about this disclosure but did not respond in any way.	A security vulnerability has been detected in cijliu librtsp up to 2ec1a81ad65280568a0c7c16420d7c10fde13b04. The affected element is the function rtsp_rely_dumps. The manipulation leads to buffer overflow. An attack has to be approached locally. This product is using a rolling release to provide continious delivery. Therefore, no version details for affected nor updated releases are available. The vendor was contacted early about this disclosure but did not respond in any way.
cvss4_cna_av		L	L	L	L
cvss4_cna_ac		L	L	L	L
cvss4_cna_at		N	N	N	N
cvss4_cna_pr		L	L	L	L
cvss4_cna_ui		N	N	N	N
cvss4_cna_vc		L	L	L	L
cvss4_cna_vi		L	L	L	L
cvss4_cna_va		L	L	L	L
cvss4_cna_sc		N	N	N	N
cvss4_cna_si		N	N	N	N
cvss4_cna_sa		N	N	N	N
cvss4_cna_bscore		4.8	4.8	4.8	4.8
cvss3_cna_av		L	L	L	L
cvss3_cna_ac		L	L	L	L
cvss3_cna_pr		L	L	L	L
cvss3_cna_ui		N	N	N	N
cvss3_cna_s		U	U	U	U
cvss3_cna_c		L	L	L	L
cvss3_cna_i		L	L	L	L
cvss3_cna_a		L	L	L	L
cvss3_cna_basescore		5.3	5.3	5.3	5.3
cvss2_cna_av		L	L	L	L
cvss2_cna_ac		L	L	L	L
cvss2_cna_au		S	S	S	S
cvss2_cna_ci		P	P	P	P
cvss2_cna_ii		P	P	P	P
cvss2_cna_ai		P	P	P	P
cvss2_cna_basescore		4.3	4.3	4.3	4.3
euvd_id			EUVD-2026-3189	EUVD-2026-3189	EUVD-2026-3189
cnnvd_id				CNNVD-202601-2969	CNNVD-202601-2969
cnnvd_name				librtsp 安全漏洞	librtsp 安全漏洞
cnnvd_hazardlevel				3	3
cnnvd_create				2026-01-19	2026-01-19
cnnvd_publish				2026-01-18	2026-01-18
cnnvd_update				2026-01-19	2026-01-19
cvss3_nvd_av					L
cvss3_nvd_ac					L
cvss3_nvd_pr					L
cvss3_nvd_ui					N
cvss3_nvd_s					U
cvss3_nvd_c					H
cvss3_nvd_i					H
cvss3_nvd_a					H
cvss3_nvd_basescore					7.8

◂ Gurɗo Gumti Gada ▸

Interested in the pricing of exploits?

See the underground prices here!