{"id":"CVE-2026-1200","aliases":["EUVD-2026-7924","GHSA-9f49-2j27-6f79","UBUNTU-CVE-2026-1200"],"status":"published","title":"Remote code execution via segmentation fault in increasebufferto function","description":"A flaw was found in the rgaufman/live555 fork of live555. A remote attacker could exploit a segmentation fault, in the `increaseBufferTo` function. This vulnerability can lead to memory corruption problems and potentially other consequences.","severity":{"version":"3.1","score":6.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L","level":"medium","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-11","score":0.0037,"percentile":0.31374,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-824"],"published":"2026-02-18T20:21:56Z","modified":"2026-10-17T12:58:04Z","affected":[{"source":"osv","ecosystem":"Ubuntu:Pro:16.04:LTS","package":"liblivemedia","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["2014.01.13-1","2016.01.29-2","2016.02.09-1","2016.02.09-1ubuntu0.1~esm1"]},{"source":"osv","ecosystem":"Ubuntu:Pro:18.04:LTS","package":"liblivemedia","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["2017.07.18-1","2017.09.12-1ubuntu1","2017.10.28-2","2018.01.29-1","2018.02.18-1","2018.02.18-1ubuntu0.1~esm1"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"liblivemedia","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["2018.11.26-1.1","2020.01.19-1","2020.01.19-1build1"]},{"source":"osv","ecosystem":"Ubuntu:26.10","package":"liblivemedia","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["2026.09.23-dfsg-1","2026.09.23-dfsg-3","2026.09.23-dfsg-4"]}],"products":[{"vendor":"https://github.com/rgaufman/live555","product":"rgaufman/live555"}],"references":[{"url":"https://access.redhat.com/security/cve/CVE-2026-1200","tags":["vdb-entry","x_refsource_REDHAT"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2430836","tags":["issue-tracking","x_refsource_REDHAT"]},{"url":"https://github.com/rgaufman/live555/issues/65"},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-1200"},{"url":"https://github.com/advisories/GHSA-9f49-2j27-6f79"},{"url":"https://ubuntu.com/security/CVE-2026-1200","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-1200","tags":["report"]}],"sources":{"cve":[{"id":"CVE-2026-1200","title":"Remote code execution via segmentation fault in increasebufferto function","description":"A flaw was found in the rgaufman/live555 fork of live555. A remote attacker could exploit a segmentation fault, in the `increaseBufferTo` function. This vulnerability can lead to memory corruption problems and potentially other consequences.","status":"published","published":"2026-02-18T20:21:56.282Z","modified":"2026-02-18T20:32:58.277Z","cvss":[{"version":"3.1","score":6.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L","level":"medium","assessor":"cna"}],"cwes":["CWE-824"],"updated_at":"2026-11-02T14:20:01.271368Z"}],"euvd":[{"id":"EUVD-2026-7924","description":"A flaw was found in the rgaufman/live555 fork of live555. A remote attacker could exploit a segmentation fault, in the `increaseBufferTo` function. This vulnerability can lead to memory corruption problems and potentially other consequences.","status":"published","published":"2026-02-18T20:21:56Z","modified":"2026-02-18T20:32:58Z","cvss":[{"version":"3.1","score":6.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L","level":"medium"}],"updated_at":"2026-11-02T19:48:37.43406Z"}],"ghsa":[{"id":"GHSA-9f49-2j27-6f79","title":"A flaw was found in the rgaufman/live555 fork of live555. A remote attacker could exploit a...","description":"A flaw was found in the rgaufman/live555 fork of live555. A remote attacker could exploit a segmentation fault, in the `increaseBufferTo` function. This vulnerability can lead to memory corruption problems and potentially other consequences.","status":"published","published":"2026-02-18T21:31:23Z","modified":"2026-02-18T21:31:34Z","cvss":[{"version":"3.1","score":6.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L","level":"medium"}],"cwes":["CWE-824"],"updated_at":"2026-11-02T15:06:15.594622Z"}],"nvd":[{"id":"CVE-2026-1200","description":"A flaw was found in the rgaufman/live555 fork of live555. A remote attacker could exploit a segmentation fault, in the `increaseBufferTo` function. This vulnerability can lead to memory corruption problems and potentially other consequences.","status":"published","published":"2026-02-18T21:16:23.07Z","modified":"2026-06-17T10:15:19.15Z","cvss":[{"version":"3.1","score":6.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L","level":"medium","assessor":"secondary"}],"cwes":["CWE-824"],"updated_at":"2026-11-02T14:12:06.274729Z"}],"osv":[{"id":"UBUNTU-CVE-2026-1200","description":"A flaw was found in the rgaufman/live555 fork of live555. A remote attacker could exploit a segmentation fault, in the `increaseBufferTo` function. This vulnerability can lead to memory corruption problems and potentially other consequences.","status":"published","published":"2026-02-18T21:16:00Z","modified":"2026-10-17T12:58:04.743423472Z","cvss":[{"version":"3.1","score":6.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L","level":"medium"}],"updated_at":"2026-11-02T16:56:00.081948Z"}]}}