Threats tagged 'ghsa-jhf7-xcw3-gmv5'

1 threat

Severity	CVSS	Signals	Threat	Source	Published	Score and star
High	7.5	EPSS 0.2%	CVE-2026-74758Heap Use-after-free High7.5EPSS 0.2%2026-10-21GCVE DatabaseCVE-2026-74758 A heap use-after-free vulnerability exists in the RTMP protocol component of Apache bRPC versions prior to 1.18.0. A remote attacker can crash a bRPC RTMP server by sending a crafted Abort control message without requiring authentication or application-level requests. The issue arises when the Abort message targets the chunk stream currently being parsed, leading to use-after-free during message processing. EPSS 0.2%Report on CVE-2026-74758 Vulnerability CWE-416 #ghsa-jhf7-xcw3-gmv5	GCVE Database	2026-10-21

Page 1 of 1