CVE-2022-40016

HIGH

media-server < 2022-08-06 - Use-After-Free in librtmp

Title source: llm

Description

Use After Free (UAF) vulnerability in ireader media-server before commit 3e0f63f1d3553f75c7d4eb32fa7c7a1976a9ff84 in librtmp, allows attackers to cause a denial of service.

References (1)

Core 1

Core References

Exploit, Issue Tracking, Vendor Advisory

https://github.com/ireader/media-server/issues/235

Scores

CVSS v3 7.5

EPSS 0.0077

EPSS Percentile 51.1%

Attack Vector NETWORK

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

CISA SSVC

Vulnrichment

Exploitation poc

Automatable yes

Technical Impact partial

Details

CWE

CWE-416

Status published

Products (1)

media-server_project/media-server < 2022-08-06

Published Feb 15, 2023

Tracked Since Feb 18, 2026