Threats affecting pkg:github/resiprocate/resiprocate

A heap-based buffer overflow vulnerability exists in reSIProcate reTurn client versions up to 1.14.0 in the TurnTcpSocket::handleReadHeader() function. Malicious TURN servers can exploit this by sending STUN or ChannelData frames with oversized declared lengths, causing memory overwrite beyond the allocated buffer and crashing the client.