CVE record · 1 source
CVE-2026-56387
The RTMP AMF parser in Apache bRPC accepts AMF string lengths and array counts directly from untrusted input.
- Vendor
- Apple, GitHub
- Product
- ios, github
- Exposure class
- Mobile OS
Coverage
1Every item in the archive that references this CVE, highest rank first. Headlines open the publisher.
-
The RTMP AMF parser in Apache bRPC accepts AMF string lengths and array counts directly from untrusted input.
The RTMP AMF parser in Apache bRPC accepts AMF string lengths and array counts directly from untrusted input. A remote unauthenticated attacker who can reach a bRPC server with RTMP enabled can send a small AMF payload with an…