PT-2026-3378 · Cijliu · Librtsp

Nemo2533 · Publicado 2026-01-18 · Atualizado 2026-01-18 · CVE-2026-1110

Positive Technologies (AI Summary)

CVSS v3.1

7.8

Alta

Vetor base

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions cijliu librtsp versions prior to 2ec1a81ad65280568a0c7c16420d7c10fde13b04

Description A flaw exists in the rtsp parse method function of cijliu librtsp. This issue can lead to a buffer overflow, potentially exploitable on the local host. The product uses continuous delivery with rolling releases, and no specific version details for affected or updated releases are available. The vendor was contacted regarding this disclosure but did not respond.

Recommendations Update cijliu librtsp to version 2ec1a81ad65280568a0c7c16420d7c10fde13b04 or later.

Exploit

Correção

Buffer Overflow

Enumeração de Fraquezas

CWE-120

CWE-119

Identificadores relacionados

CVE-2026-1110

Produtos afetados

Librtsp

Referências · 7

• 🔥 https://github.com/fizz-is-on-the-way/vuls_protocol/blob/main/librtsp_rtsp_parse_method/librtsp_rtsp_parse_method.md · Exploit
• https://osv.dev/vulnerability/CVE-2026-1110 · Aviso do Fabricante
• https://vuldb.com/?id.341702 · Nota
• https://twitter.com/CVEnew/status/2012763616769110444 · Publicação no Twitter
• https://vuldb.com/?ctiid.341702 · Nota
• https://vuldb.com/?submit.732603 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2026-1110 · Nota de Segurança