MEDIUMVulnerability
CVE-2026-82820
A vulnerability was found in FLVMeta up to 1.2.2. Affected is the function amf_string_new of the file src/amf.c of the component AMF String Processing. The manipulation of the argument length results in heap-based buffer overflow. The attack can be launched remotely. The exploit has been made public and could be used. The patch is identified as f412a33b9a84c2d1a9dee145a868feddbf64879e. A patch should be applied to remediate this issue. The project maintainer doubts the security impact: "While I acknowledged the bugs and provided fixes, I have yet to see any way to exploit these alleged vulnerabilities."
Properties
- severity
- MEDIUM
- score
- 4.3
- epss_score
- 0.00364
- cve_id
- CVE-2026-82820
- vector
- CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L
- published_at
- 2026-08-31T19:17:23.137
- last_modified
- 2026-09-01T19:17:29.193
- epss_percentile
- 0.29531
Related Entities (4)
ENRICHED_BY (1)
→[Source]FIRST EPSS
DESCRIBED_BY (1)
→[Source]NVD
HAS_WEAKNESS (2)
→[Weakness]Heap-based Buffer Overflow
→[Weakness]Improper Restriction of Operations within the Bounds of a Memory Buffer
Explore deeper with Ninja Signal's threat intelligence graph