CVE-2026-82821
MediumCVSS 4.3Summary
A vulnerability was found in FLVMeta up to 1.2.2 in the function amf_object_get in src/amf.c during AMF object parsing. The manipulation causes a null pointer dereference. The attack can be initiated remotely, and the exploit has been publicly disclosed.
Risk Assessment
The vulnerability may lead to application crashes (denial of service) via a remote attack. Although the project maintainer doubts the real impact, applying the patch is recommended.
Recommendation
Apply the patch named 52642f7dfb76ec7334016622dde60b1ae963d79b to fix the issue.
Other vulnerabilities in FLVMeta
See all- CVE-2026-82820Medium
A vulnerability was found in FLVMeta up to 1.2.2 in the function amf_string_new in src/amf.c during AMF string processing. Manipulation of the length argument results in a heap-based buffer overflow. The attack can be launched remotely, and the exploit has been made public.
- CVE-2023-36243High
FLVMeta v1.2.1 was found to contain a buffer overflow in the xml_on_metadata_tag_only function at dump_xml.c.
Original NVD description (English source)
A vulnerability was determined in FLVMeta up to 1.2.2. Affected by this vulnerability is the function amf_object_get of the file src/amf.c of the component AMF Object Parsing. This manipulation causes null pointer dereference. The attack may be initiated remotely. The exploit has been publicly disclosed and may be utilized. Patch name: 52642f7dfb76ec7334016622dde60b1ae963d79b. To fix this issue, it is recommended to deploy a patch. The project maintainer doubts the security impact: "While I acknowledged the bugs and provided fixes, I have yet to see any way to exploit these alleged vulnerabilities."