CVE-2026-121625

LOW 3.7

GNU Gatekeeper before 5.16 Out-of-Bounds Read via RTCP SDES Parsing

CVSS Score

3.7

EPSS Score

0.0%

EPSS Percentile

0th

GNU Gatekeeper (gnugk) before 5.16 contains an out-of-bounds read vulnerability in ParseRTCP() in ProxyChannel.cxx that allows remote RTP peers to read heap memory past received packets. Attackers can send RTCP SDES items lacking a NUL byte to the media proxy port during proxied H.323 calls with EnableRTCPStats enabled, crashing the gatekeeper.

CWE	CWE-125
Vendor	willamowius
Product	gnugk
Published	Nov 3, 2026
Last Updated	Nov 3, 2026

Stay Ahead of the Next One

Get instant alerts for willamowius gnugk

Be the first to know when new low vulnerabilities affecting willamowius gnugk are published — delivered to Slack, Telegram or Discord.

Get Free Alerts → Free · No credit card · 60 sec setup

CVSS v3 Breakdown

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L

Attack Vector

Network

Attack Complexity

High

Privileges Required

None

User Interaction

None

Scope

Unchanged

Confidentiality

None

Integrity

None

Availability

Low

Affected Versions

willamowius / gnugk

0 < 5.16

References

NVD ↗ CVE.org ↗ EPSS Data ↗

github.com: https://github.com/willamowius/gnugk/commit/e8939d03b0b2ef46e356f3144a6ee14f2920b777 github.com: https://github.com/willamowius/gnugk/releases/tag/v5_16 github.com: https://github.com/willamowius/gnugk/blob/v5_15/ProxyChannel.cxx#L14867-L14895 github.com: https://github.com/willamowius/gnugk vulncheck.com: https://www.vulncheck.com/advisories/gnu-gatekeeper-before-5.16-out-of-bounds-read-via-rtcp-sdes-parsing

Credits

Tristan Madani (Talence Security) Jan Willamowius