Vulnerability · Published Nov 3, 2026 · Assigned by VulnCheck

CVE-2026-121626GNU Gatekeeper before 5.16 Out-of-Bounds Read in H.460.24 RTCP Probe Handler

Low 3.7

In plain English

A low-severity out-of-bounds read in gnugk from willamowius. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.3% (higher than 27% of all known vulnerabilities).

Severity (CVSS 3.1)3.7Low

Exploit odds (30 days)0.3%top 72.6% of all CVEs

Exploited in the wildNo reportsCISA SSVC: none

Attack toolingNoneno public tooling known

Official description

GNU Gatekeeper (gnugk) before 5.16 contains an out-of-bounds read vulnerability in H46024Socket::ReceivedProbePacket() that allows remote attackers to cause a heap over-read by sending short probe packets. Attackers can send a short application-defined RTCP packet to the media port during H.460.24 probing to read past the heap allocation and possibly crash the gatekeeper.

Affected products (as reported)

Vendor	Product	Versions
willamowius	gnugk	0 – before 5.16

Weakness: CWE-125 · Vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L

References

Patch Commit patch
gnugk v5_16 Release Notes release-notes
https://github.com/willamowius/gnugk/blob/v5_15/GkClient.cxx#L963-L990 technical-description
https://github.com/willamowius/gnugk product
VulnCheck Advisory: GNU Gatekeeper before 5.16 Out-of-Bounds Read in H.460.24 RTCP Probe Handler third-party-advisory