srt -- Multiple vulnerabilities

The SRT project reports:

• CVE-2026-55869: Heap-Based Buffer Overflow in KMREQ Handling. A remote attacker may be able to trigger a heap-based buffer overflow during key material request processing, leading to a denial of service or potentially arbitrary code execution.
• CVE-2026-55868: Encryption State Machine Downgrade. A flaw in the encryption state machine may allow an attacker to downgrade the negotiated encryption, weakening confidentiality protections for the SRT stream.

[source]