Asterisk Project Security Advisory - Insufficient RTCP packet validation could allow reading stale buffer contents and when combined with the nat and symmetric_rtp options allow redirecting where Asterisk sends the next RTCP report.
313ff9367083c848ad358358e1ef5d2e2cc08ab243a86253a3085a0a2c87e354