CVE-2026-118689
OvenMediaEngine through 0.21.0 OVT Relay DoS via Oversized payload_length
OvenMediaLabs OvenMediaEngine
CVSS
8.7HighExploitationNo known exploitationNot in CISA KEV, which does not prove it is unexploitedCISA KEV
Exploit odds (EPSS)No scoreNo FIRST EPSS score in this snapshot yet
Fixed inNone listedNo source names a fixed version. Check the vendor advisory below
What fixes it
No source in this snapshot names a fixed version. The vendor advisories under References are the place to check.
Description
OvenMediaEngine through 0.21.0 contains a denial of service vulnerability in OvtPacket::LoadHeader() that allows unauthenticated attackers to stall connections by sending payload_length values above 32750. Attackers can send crafted OVT packets to the OVT listener to hold connections open indefinitely and accumulate buffered memory, disrupting origin-to-edge stream relay.
Text from CVE List
Affected versions 1
- OvenMediaEngineaffected: all versions through 0.21.0CVE List
References 6
- github.com/OvenMediaLabs/OvenMediaEngine/commit/ce316146d668a934217f25c777289ca256aa6786Fixvia CVE List
- vulncheck.com/advisories/ovenmediaengine-through-0.21.0-ovt-relay-dos-via-oversized-payload-lengthAdvisoryvia CVE List
- github.com/OvenMediaLabs/OvenMediaEngine/issues/2330Referencevia CVE List
- github.com/OvenMediaLabs/OvenMediaEngineReferencevia CVE List
- github.com/OvenMediaLabs/OvenMediaEngine/blob/v0.21.0/src/modules/ovt_packetizer/ovt_packet.cpp#L48-L129Referencevia CVE List
- github.com/OvenMediaLabs/OvenMediaEngine/blob/v0.21.0/src/modules/ovt_packetizer/ovt_depacketizer.cpp#L32-L53Referencevia CVE List