AIKIDO-2026-10504

TL;DR

Affected versions of this package are vulnerable to use-after-free due to improper lifetime management of internally allocated media buffers and callback objects. The affected logic may continue to reference memory after it has been released during asynchronous stream processing, cleanup, or event callback handling. An attacker able to trigger specific connection, teardown, or data-processing sequences can cause the application to access freed memory, potentially leading to crashes, memory corruption, or undefined behavior.