{"id":"CVE-2026-118689","title":"OvenMediaEngine through 0.21.0 OVT Relay DoS via Oversized payload_length","summary":"OvenMediaEngine through 0.21.0 contains a denial of service vulnerability in OvtPacket::LoadHeader() that allows unauthenticated attackers to stall connections by sending payload_length values above 32750. Attackers can send crafted OVT …","severity":"high","cvss":7.5,"cvssVector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvssSource":"cna","cwe":["CWE-770"],"vendor":"OvenMediaLabs","product":"OvenMediaEngine","affected":["OvenMediaEngine <= 0.21.0"],"ssvc":{"exploitation":"poc","automatable":"yes","technicalImpact":"partial","timestamp":"2026-11-03T13:39:11.721243Z"},"exploitAvailable":true,"published":"2026-10-28","updated":"2026-11-03","sourceUpdated":"2026-11-03T13:39:32.884Z","source":"CVEORG","sourceUrl":"https://www.cve.org/CVERecord?id=CVE-2026-118689","references":[{"url":"https://github.com/OvenMediaLabs/OvenMediaEngine/issues/2330","label":"GitHub Issue #2330"},{"url":"https://github.com/OvenMediaLabs/OvenMediaEngine"},{"url":"https://github.com/OvenMediaLabs/OvenMediaEngine/blob/v0.21.0/src/modules/ovt_packetizer/ovt_packet.cpp#L48-L129"},{"url":"https://github.com/OvenMediaLabs/OvenMediaEngine/blob/v0.21.0/src/modules/ovt_packetizer/ovt_depacketizer.cpp#L32-L53"},{"url":"https://github.com/OvenMediaLabs/OvenMediaEngine/commit/ce316146d668a934217f25c777289ca256aa6786"},{"url":"https://www.vulncheck.com/advisories/ovenmediaengine-through-0.21.0-ovt-relay-dos-via-oversized-payload-length","label":"VulnCheck Advisory: OvenMediaEngine through 0.21.0 OVT Relay DoS via Oversized payload_length"}],"tags":["cve.org","exploit-available"],"epss":0.00509,"epssPercentile":0.43718,"ingestedAt":"2026-10-30T21:09:21.613Z","slug":"CVE-2026-118689","body":"## Overview\n\nOvenMediaEngine through 0.21.0 contains a denial of service vulnerability in OvtPacket::LoadHeader() that allows unauthenticated attackers to stall connections by sending payload_length values above 32750. Attackers can send crafted OVT packets to the OVT listener to hold connections open indefinitely and accumulate buffered memory, disrupting origin-to-edge stream relay.\n\n## Affected\n\n- `OvenMediaEngine <= 0.21.0`\n\n## Remediation\n\nRefer to the linked advisories for vendor-supplied fixes and affected version ranges.","depth":"midnight","depthScore":53,"depthScoreParts":{"impact":41.3,"likelihood":0.1,"exploitation":12,"ransomware":0},"changes":[{"seq":233653,"id":"CVE-2026-118689","ts":1793907150437,"field":"exploit_available","old":"false","new":"true"}]}