VYPR
← All advisories
Unrated severityNVD Advisory· Published Aug 1, 2026

Debian golang-github-pion-stun-v3: pion/stun is a Go implementation of STUN. Prior to 3.1.3, XORMappedAddress.GetFr…

CVE-2026-54909

Description

pion/stun is a Go implementation of STUN. Prior to 3.1.3, XORMappedAddress.GetFromAs can panic while parsing a malformed short XOR-MAPPED-ADDRESS attribute in STUN or ICE Binding-response parsing paths, allowing remote denial of service. This issue is fixed in version 3.1.3.

Affected products

2

Patches

Vulnerability mechanics

News mentions

0

No linked articles in our index yet.