Executive Summary

This vulnerability occurs in the decodeAppPacket function of the RtcpAppPacket.cpp file, where there is a possible out-of-bounds (OOB) read due to a missing bounds check.

Because the code does not properly verify the boundaries before reading data, it may read memory outside the intended buffer.

This flaw can be exploited remotely without requiring any user interaction or additional execution privileges.

Useful 0 Not Useful 0

Impact Analysis

The primary impact of this vulnerability is remote information disclosure.

An attacker could exploit the out-of-bounds read to access sensitive information from memory that should not be accessible.

No additional execution privileges or user interaction are needed, which increases the risk of exploitation.

Useful 0 Not Useful 0