CVE-2012-3461

CVE-2012-3461 is a denial-of-service vulnerability affecting libotr versions prior to 3.2.1, specifically within the otrl_base64_otr_decode, otrl_proto_data_read_flags, otrl_proto_accept_data, and decode functions. A remote attacker can exploit this by sending a specially crafted base64 string ("?OTR:===."), causing a zero-length buffer allocation error that leads to a heap-based buffer overflow and subsequent application crash. The vulnerability has a CVSS score of 4.3 (Medium), indicating a network-based attack with medium complexity and potential for partial availability impact. There is no evidence of active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion or media coverage surrounding this CVE.