Impact

librtmp has no isolation of handler between server and client

Patches

fix GHSA-98cg-j83c-qhf7 librtmp invoke null handler

Workarounds

1. split server/client hanlder (with default null value)
2. check rtmp server/client handle

References

@Cossack9989

For more information

If you have any questions or comments about this advisory:

• Open an issue in ireader/media-server