PT-2026-3378 · Cijliu · Librtsp

Nemo2533 · Published 2026-01-18 · Updated 2026-01-18 · CVE-2026-1110

Positive Technologies (AI Summary)

CVSS v3.1

7.8

High

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions cijliu librtsp versions prior to 2ec1a81ad65280568a0c7c16420d7c10fde13b04

Description A flaw exists in the rtsp parse method function of cijliu librtsp. This issue can lead to a buffer overflow, potentially exploitable on the local host. The product uses continuous delivery with rolling releases, and no specific version details for affected or updated releases are available. The vendor was contacted regarding this disclosure but did not respond.

Recommendations Update cijliu librtsp to version 2ec1a81ad65280568a0c7c16420d7c10fde13b04 or later.

Exploit

Fix

Buffer Overflow

Weakness Enumeration

CWE-120

CWE-119

Related Identifiers

CVE-2026-1110

Affected Products

Librtsp

References · 7

• 🔥 https://github.com/fizz-is-on-the-way/vuls_protocol/blob/main/librtsp_rtsp_parse_method/librtsp_rtsp_parse_method.md · Exploit
• https://osv.dev/vulnerability/CVE-2026-1110 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2026-1110 · Security Note
• https://vuldb.com/?id.341702 · Note
• https://twitter.com/CVEnew/status/2012763616769110444 · Twitter Post
• https://vuldb.com/?ctiid.341702 · Note
• https://vuldb.com/?submit.732603 · Note