CVE-2026-0148

None

CVSS

—

EPSS

0.3%

Published

Jun 16, 2026

CISA due date

—

The record

In multiple functions of VideoRtpPayloadDecoderNode.cpp, there is a possible out of bounds write due to an integer overflow. This could lead to remote code execution with no additional execution privileges needed. User interaction is not needed for exploitation.

Affected packages

Ecosystem	Package	Introduced	Fixed