CVE-2026-0129

6th percentile — higher than 6% of all known CVEs

In RtcpByePacket::decodeByePacket, there is a possible vulnerability due to a missing bounds check. This could lead to remote information disclosure with no additional execution privileges needed.

This vulnerability could allow attackers to gain access to sensitive information, posing a threat to the organization's data security. User interaction is needed for exploitation.

It is recommended to implement proper bounds checking in the code and to monitor user activity to detect potential attempts to exploit this vulnerability.