GNU Gatekeeper (gnugk) before 5.16 contains an out-of-bounds read vulnerability in H46024Socket::ReceivedProbePacket() that allows remote attackers to cause a heap over-read by sending short probe packets.
CVSS 4.0MEDIUM 6.3·Network·No auth·No interaction·EPSS 0.00338·Published 2026-11-03·Fixed in 5.16CWE-125
GNU Gatekeeper (gnugk) before 5.16 contains an out-of-bounds read vulnerability in ParseRTCP() in ProxyChannel.cxx that allows remote RTP peers to read heap memory past received packets.
CVSS 4.0MEDIUM 6.3·Network·No auth·No interaction·EPSS 0.00362·Published 2026-11-03·Fixed in 5.16CWE-125