CVE-2026-1200

Remote code execution via segmentation fault in increasebufferto function

CVSS 6.3 MEDIUMEPSS 0.3%CWE-824

Vexday Risk Score

13Low

SSVC decision (CISA)

Track

No exploitation signal → monitor

CVSS 6.3EPSS 0.3%KEV nãoPoC —Nuclei —Metasploit —Patch —

Lifecycle

18 Feb 2026Published on NVD

Recommendation: Monitor — no exploitation signal at the moment.

A flaw was found in the rgaufman/live555 fork of live555. A remote attacker could exploit a segmentation fault, in the `increaseBufferTo` function. This vulnerability can lead to memory corruption problems and potentially other consequences.

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L

Affected products

https://github.com/rgaufman/live555 · rgaufman/live555

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →

References

https://access.redhat.com/security/cve/CVE-2026-1200 https://bugzilla.redhat.com/show_bug.cgi?id=2430836 https://github.com/rgaufman/live555/issues/65