UBUNTU-CVE-2026-122126: Buffer Overflow

Published Nov 5, 2026

Updated

reSIProcate reTurn client through 1.14.0 contains a heap buffer overflow in TurnTcpSocket::handleReadHeader() that allows malicious TURN servers to overwrite memory via oversized frame lengths. Attackers can send STUN or ChannelData frames declaring up to 65535 bytes, writing roughly 57 KB past the fixed 8192-byte mReadBuffer and crashing the client.

Affected Software

3 affected components

ubuntu/resiprocate*

Event History

Nov 5, 2026

CVE Published

via OSV·12:00 AM

Data Sourced

via OSV·12:00 AM

DescriptionSeverityAffected Software

Frequently Asked Questions

Which deployments are exposed to this issue?

Deployments using the reSIProcate reTurn client through version 1.14.0 are exposed when they communicate with a malicious TURN server. The affected Ubuntu software package is resiprocate.

What does an attacker need to exploit the vulnerability?

An attacker needs to operate or control a TURN server that the vulnerable client connects to. They can send STUN or ChannelData frames with oversized declared lengths to trigger the overflow without requiring privileges or user interaction.

What is the likely impact of exploitation?

Oversized frames can write roughly 57 KB beyond the fixed 8192-byte read buffer. The described outcome is a client crash, resulting in denial of service.

UBUNTU-CVE-2026-122126: Buffer Overflow

Affected Software

Event History

Frequently Asked Questions

Which deployments are exposed to this issue?

What does an attacker need to exploit the vulnerability?

What is the likely impact of exploitation?

Company

Resources

Contact

Frequently Asked Questions

Which deployments are exposed to this issue?

What does an attacker need to exploit the vulnerability?

What is the likely impact of exploitation?