CVE-2025-21483CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer in Data Network Stack & Connectivity

Critical · published September 24, 2025

CVSS v3.1
9.8
EPSS
0%
Percentile
35.0
In the wild
Unconfirmed
What it is

🚨 A memory corruption flaw in your media pipeline means that one rogue RTP packet can wreak havoc! 🔥 Think of it like a pizza delivery gone wrong—if the delivery driver brings an extra topping that causes the whole pizza to collapse, you're left with a messy disaster instead of a delicious dinner! 🍕 In this case, an attacker could send a specially crafted RTP packet that corrupts memory, potentially leading to crashes or even full remote code execution! Your media services could be turned upside down, leaving sensitive data exposed and services disrupted.

Put simply

Think of it like a pizza delivery gone wrong—if the delivery driver brings an extra topping that causes the whole pizza to collapse, you're left with a messy disaster instead of a delicious dinner! 🍕 This vulnerability arises during the reassembly of NALUs (Network Abstraction Layer Units) from incoming RTP packets, allowing attackers to corrupt memory and manipulate the system.

What to do

In this case, an attacker could send a specially crafted RTP packet that corrupts memory, potentially leading to crashes or even full remote code execution! Your media services could be turned upside down, leaving sensitive data exposed and services disrupted. Update your media processing software to the latest version immediately, ensuring it incorporates the necessary security patches. Review all RTP handling procedures and consider implementing stricter validation checks on incoming packets to bolster your defenses. You've got this! Follow these steps to secure your systems and maintain your hero status! 🛡️

The record
Technical detail
CVSS v3.1
9.8 · CRITICAL
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00418 · 35.0th percentile
Weakness
CWE-119 · Improper Restriction of Operations within the Bounds of a Memory Buffer
Published
2025-09-24T15:33Z
EPSS history
Timeline
  • 24 SEP 15:33Z
    Improper Restriction of Operations within the Bounds of a Memory Buffer in Data Network Stack & Connectivity
    cvelistv5