VYPR

OvenMediaEngine

by OvenMediaLabs

CVEs (1)

  • CVE-2026-118689HigOct 28, 2026
    risk 0.42cvss 7.5epss 0.01

    OvenMediaEngine through 0.21.0 contains a denial of service vulnerability in OvtPacket::LoadHeader() that allows unauthenticated attackers to stall connections by sending payload_length values above 32750. Attackers can send crafted OVT packets to the OVT listener to hold…