Mumble Out-of-Bounds Array Access Vulnerability Leading to Client Crash

Vulnerability

A denial-of-service vulnerability has been identified in Mumble versions prior to 1.6.870. The issue arises from an out-of-bounds array access during Opus decoding, which can cause the application to crash.

Impact

Exploitation of this vulnerability leads to a crash of the Mumble client.

Remediation

Users can upgrade to Mumble versions 1.5.735-7 or 1.5.735-8 to address this vulnerability.

Added: Mar 16, 2026, 2:35 PM
Updated: Mar 16, 2026, 2:35 PM

Vulnerability Rating

Custom Algorithm
spread
4.2
impact
2.5
exploitability
5.3
remediation
7.7
relevance
4.0
threat
3.2
urgency
2.9
incentive
0.0

Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.