CVE-2026-0157

None

CVSS

—

EPSS

0.2%

Published

Jun 16, 2026

CISA due date

—

The record

In RtcpHeader::decodeRtcpHeader, there is a possible OOB read due to a missing bounds check. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.

Affected packages

Ecosystem	Package	Introduced	Fixed