CVE-2026-40613— Coturn: Misaligned Memory Access in coturn STUN Attribute Parser (Remote DoS on ARM64)
Get alerts for future matching vulnerabilitiesLog in to subscribe
I. Basic Information for CVE-2026-40613
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗ Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
Coturn: Misaligned Memory Access in coturn STUN Attribute Parser (Remote DoS on ARM64)
Source: NVD (National Vulnerability Database)
Vulnerability Description
Coturn is a free open source implementation of TURN and STUN Server. Prior to 4.10.0, the STUN/TURN attribute parsing functions in coturn perform unsafe pointer casts from uint8_t * to uint16_t * without alignment checks. When processing a crafted STUN message with odd-aligned attribute boundaries, this results in misaligned memory reads at ns_turn_msg.c. On ARM64 architectures (AArch64) with strict alignment enforcement, this causes a SIGBUS signal that immediately kills the turnserver process. An unauthenticated remote attacker can crash any ARM64 coturn deployment by sending a single crafted UDP packet. This vulnerability is fixed in 4.10.0.
Source: NVD (National Vulnerability Database)
CVSS Information
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Source: NVD (National Vulnerability Database)
Vulnerability Type
不正确的类型转换
Source: NVD (National Vulnerability Database)
Vulnerability Title
Coturn 安全漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
Coturn是Coturn开源的一款TURN（VoIP媒体业务NAT穿越服务器和网关）和STUN（用户数据报协议简单穿越网络地址转换器）Server的开源实现。 Coturn 4.10.0之前版本存在安全漏洞，该漏洞源于STUN/TURN属性解析函数未进行对齐检查，可能导致ARM64架构下内存读取未对齐，使turnserver进程崩溃。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)
Affected Products
II. Public POCs for CVE-2026-40613
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POCPremium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2026-40613
请登录查看更多情报信息。
IV. Related Vulnerabilities
Same weakness: CWE-704
- CVE-2026-42576
apko `DiscoverKeys` has a panic on non-rsa jwks key that cau - CVE-2026-34379
OpenEXR has a misaligned write in LossyDctDecoder_execute le - CVE-2021-4456
Net::CIDR versions before 0.24 for Perl mishandle leading ze - CVE-2025-40541
SolarWinds Serv-U Insecure Direct Object Reference (IDOR) Re - CVE-2025-40540
SolarWinds Serv-U Type Confusion Remote Code Execution Vulne
V. Comments for CVE-2026-40613
No comments yet