Cijliu Librtsp Buffer Overflow Vulnerability in RTSP Request Parsing

A buffer overflow vulnerability has been identified in Cijliu Librtsp versions up to commit 2ec1a81ad65280568a0c7c16420d7c10fde13b04. The issue arises in the rtsp_parse_request function, where improper input handling can be exploited to overwrite memory. This vulnerability requires local access to the affected system.

Impact

Exploitation of this vulnerability leads to a buffer overflow, which can commonly result in arbitrary code execution or causing a program to crash.

Reproduction

The vulnerability can be reproduced by building the Librtsp library and running the example demo application. Valgrind can be used to monitor for memory errors while the application receives a crafted RTSP request that triggers the buffer overflow.