CVE-2026-122126

Name of the Vulnerable Software and Affected Versions reSIProcate reTurn client versions prior to 1.14.1

Description A heap buffer overflow exists in the synchronous TCP and TLS client within the handleReadHeader() function of TurnTcpSocket (also inherited by TurnTlsSocket). This occurs when a malicious TURN server or an on-path attacker sends STUN or ChannelData frames with oversized lengths up to 65535 bytes. This action allows the attacker to write approximately 57 KB beyond the fixed 8192-byte mReadBuffer, leading to memory overwrite and client crashes. A heap buffer overflow is a condition where a program writes more data to a heap-allocated memory block than it can hold.

Recommendations Update reSIProcate reTurn client to a version newer than 1.14.0.