The AMF3CD_AddProp function in amf.c in RTMPDump 2.4 allows remote RTMP Media servers to execute arbitrary code.
- http://www.talosintelligence.com/reports/TALOS-2016-0067/
No PoCs found on GitHub currently.