CVE-2026-0130
LowCVSS 3.5Exploitation Probability (EPSS)
Low risk7th percentile — higher than 7% of all known CVEs
Summary
In RtcpChunk::decodeRtcpChunk, there is a possible out of bounds read due to a heap buffer overflow. This could lead to remote information disclosure with no additional execution privileges needed.
Risk Assessment
The risk to the organization is the potential for remote disclosure of sensitive information, which could lead to breaches of user data privacy.
Recommendation
It is recommended to update the software to the latest version to mitigate this vulnerability and to monitor systems for unauthorized access.
Original NVD description (English source)
In RtcpChunk::decodeRtcpChunk, there is a possible out of bounds read due to a heap buffer overflow. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is needed for exploitation.