CVE-2026-82821

Medium

Description

A vulnerability was determined in FLVMeta up to 1.2.2. Affected by this vulnerability is the function amf_object_get of the file src/amf.c of the component AMF Object Parsing. This manipulation causes null pointer dereference. The attack may be initiated remotely. The exploit has been publicly disclosed and may be utilized. Patch name: 52642f7dfb76ec7334016622dde60b1ae963d79b. To fix this issue, it is recommended to deploy a patch. The project maintainer doubts the security impact: "While I acknowledged the bugs and provided fixes, I have yet to see any way to exploit these alleged vulnerabilities."

SeverityMedium
CVSS4.3
Exploit probability48. percentile0.6%
ProductFlvmeta
PublishedAug 31, 2026
First seenAug 31, 2026

How to fix

Affected products

ProductAffected versionsFixed in
flvmeta flvmeta1.2.0, 1.2.1, 1.2.2—

Check your version

Choose the product and enter the version you run to see whether it falls in the affected range.

In the Intelligence 360 plan

Attack Surface Management

See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.