CVE-2026-1108

low-risk
Published 2026-01-18

A security vulnerability has been detected in cijliu librtsp up to 2ec1a81ad65280568a0c7c16420d7c10fde13b04. The affected element is the function rtsp_rely_dumps. The manipulation leads to buffer overflow. An attack has to be approached locally. This product is using a rolling release to provide continious delivery. Therefore, no version details for affected nor updated releases are available. The vendor was contacted early about this disclosure but did not respond in any way.

Do I need to act?

-
0.02% chance of exploitation
EPSS score — low exploit probability
-
Not on CISA KEV list
No confirmed active exploitation reported to CISA
?
Patch status unknown
Check vendor advisories for fix availability and mitigation guidance
5
CVSS 5.3/10 Medium
LOCAL / LOW complexity

Affected Products (1)

Librtsp

Affected Vendors

Cijliu

References (4)

Exploit https://github.com/fizz-is-on-the-way/vuls_protocol/blob/main/librtsp_rtsp_rely_...
Permissions Required https://vuldb.com/?ctiid.341700
Third Party Advisory https://vuldb.com/?id.341700
Third Party Advisory https://vuldb.com/?submit.732598
23
/ 100
low-risk
Severity 18/34 · Moderate
Exploitability 0/34 · Minimal
Exposure 5/34 · Minimal