CVE-2026-104074 | coturn up to 4.10.0 src/client/ns_turn_msg.c stun_init_error_response_common_str uninitialized resource

October 7, 2026 Yanac

A vulnerability described as problematic has been identified in coturn up to 4.10.0. The affected element is the function stun_init_error_response_common_str of the file src/client/ns_turn_msg.c. The manipulation results in uninitialized resource.

This vulnerability is cataloged as CVE-2026-104074. The attack may be launched remotely. There is no exploit available.

Upgrading the affected component is recommended.VulDB Recent EntriesRead More