RTP security risks?

It was already fixed. Security releases went out days ago[1].

[1] Asterisk 11.25.2, 13.17.1, 14.6.1, 11.6-cert17, 13.13-cert5 Now Available (Security Release)