CVE-2026-122126— reSIProcate reTurn client through 1.14.0 Heap Buffer Overflow via TurnTcpSocket

Quick assessment

Affected

resiprocate resiprocate

Exploitation

No confirmed in-the-wild exploitation; assess based on exposure

Recommended action

Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.

reSIProcate 的 reTurn 客户端（版本 1.14.0 及更早版本）在函数中存在堆缓冲区溢出漏洞。该漏洞允许恶意的 TURN 服务器通过发送超大帧长度的数据包来覆盖内存。攻击者可发送声明长度高达 65535 字节的 STUN 或 ChannelData 帧，导致数据写入超出固定的 8192 字节缓冲区约 57 KB 的位置，从而引发客户端崩溃。

CVSS 5.9 · Medium Updated Nov 05, 2026

Possible ATT&CK Techniques 1 AI

T1190 · Exploit Public-Facing Application

Get alerts for future matching vulnerabilities Log in to subscribe

Vulnerability Information

Have questions about the vulnerability? See if Shenlong's analysis helps!

View Shenlong Deep Dive ↗

Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.

Vulnerability Title

reSIProcate reTurn client through 1.14.0 Heap Buffer Overflow via TurnTcpSocket

Source: CVE Program / CVE List V5

Vulnerability Description

reSIProcate reTurn client through 1.14.0 contains a heap buffer overflow in TurnTcpSocket::handleReadHeader() that allows malicious TURN servers to overwrite memory via oversized frame lengths. Attackers can send STUN or ChannelData frames declaring up to 65535 bytes, writing roughly 57 KB past the fixed 8192-byte mReadBuffer and crashing the client.

Source: CVE Program / CVE List V5

CVSS Information

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H

Source: CVE Program / CVE List V5

Vulnerability Type

堆缓冲区溢出

Source: CVE Program / CVE List V5

Affected Products

Vendor	Product	Affected Versions	CPE	Subscribe
resiprocate	resiprocate	0 ~ 1.14.0	-

II. Public POCs for CVE-2026-122126

#	POC Description	Source Link	Shenlong Link

AI-Generated POC Premium

No public POC found.

III. Intelligence Information for CVE-2026-122126

请登录查看更多情报信息。

Other References for CVE-2026-122126 (5)

https://github.com/resiprocate/resiprocate/blob/resiprocate-1.14.0/reTurn/client/TurnTcpSocket.cxx#L124-L147 technical-description
https://github.com/resiprocate/resiprocate product
https://github.com/resiprocate/resiprocate/commit/5bb559fd96298073cab369fdfa610f981fb01e95 patch
https://github.com/resiprocate/resiprocate/pull/496 issue-tracking patch
https://www.vulncheck.com/advisories/resiprocate-return-client-through-1.14.0-heap-buffer-overflow-via-turntcpsocket third-party-advisory

https://www.cve.org/CVERecord?id=CVE-2026-122126

IV. Related Vulnerabilities

Same weakness: CWE-122