Browse CVEs

MEDIUM 6.5 CVE-2025-65407 A use-after-free in the MPEG1or2Demux::newElementaryStream() function of Live555 Streaming Media v2018.09.02 allows attackers to cause a Denial of Se… Streaming Media No fix yet Fix from $1,6002025-12-01 MEDIUM 6.5 CVE-2025-65406 A heap overflow in the MatroskaFile::createRTPSinkForTrackNumber() function of Live555 Streaming Media v2018.09.02 allows attackers to cause a Denial… Streaming Media No fix yet Fix from $1,6002025-12-01 MEDIUM 6.5 CVE-2025-65408 A NULL pointer dereference in the ADTSAudioFileServerMediaSubsession::createNewRTPSink() function of Live555 Streaming Media v2018.09.02 allows attac… Streaming Media No fix yet Fix from $1,6002025-12-01 MEDIUM 6.5 CVE-2025-65404 A buffer overflow in the getSideInfo2() function of Live555 Streaming Media v2018.09.02 allows attackers to cause a Denial of Service (DoS) via a cra… Streaming Media No fix yet Fix from $1,6002025-12-01 MEDIUM 6.5 CVE-2025-65405 A use-after-free in the ADTSAudioFileSource::samplingFrequency() function of Live555 Streaming Media v2018.09.02 allows attackers to cause a Denial o… Streaming Media No fix yet Fix from $1,6002025-12-01 CRITICAL 9.8 CVE-2023-37117 A heap-use-after-free vulnerability was found in live555 version 2023.05.10 while handling the SETUP. Live555 No fix yet Fix from $2,3002024-01-12 HIGH 7.5 CVE-2021-41396 Live555 through 1.08 does not handle socket connections properly. A huge number of incoming socket connections in a short time invokes the error-hand… Live555 after 1.08 Fix from $1,9502022-07-12 HIGH 7.5 CVE-2021-39282 Live555 through 1.08 has a memory leak in AC3AudioStreamParser for AC3 files. Live555 after 1.08 Fix from $1,9502021-08-18 MEDIUM 5.5 CVE-2021-39283 liveMedia/FramedSource.cpp in Live555 through 1.08 allows an assertion failure and application exit via multiple SETUP and PLAY commands. Live555 after 1.08 Fix from $1,6002021-08-18 HIGH 7.5 CVE-2021-38380 Live555 through 1.08 mishandles huge requests for the same MP3 stream, leading to recursion and s stack-based buffer over-read. An attacker can lever… Live555 2021.08.04+ Fix from $1,9502021-08-10 MEDIUM 6.5 CVE-2021-38381 Live555 through 1.08 does not handle MPEG-1 or 2 files properly. Sending two successive RTSP SETUP commands for the same track causes a Use-After-Fre… Live555 2021.08.09+ Fix from $1,6002021-08-10 MEDIUM 6.5 CVE-2021-38382 Live555 through 1.08 does not handle Matroska and Ogg files properly. Sending two successive RTSP SETUP commands for the same track causes a Use-Afte… Live555 2021.08.06+ Fix from $1,6002021-08-10 HIGH 7.5 CVE-2021-28899 Vulnerability in the AC3AudioFileServerMediaSubsession, ADTSAudioFileServerMediaSubsession, and AMRAudioFileServerMediaSubsessionLive OnDemandServerM… Streaming Media 2021.3.16+ Fix from $1,9502021-04-29 CRITICAL 9.8 CVE-2020-24027 In Live Networks, Inc., liblivemedia version 20200625, there is a potential buffer overflow bug in the server handling of a RTSP "PLAY" command, when… Liblivemedia No fix yet Fix from $2,3002021-01-11 CRITICAL 9.8 CVE-2019-15232 Live555 before 2019.08.16 has a Use-After-Free because GenericMediaServer::createNewClientSessionWithId can generate the same client session ID in su… Streaming Media 2019-08-16+ Fix from $2,3002019-08-20 HIGH 7.5 CVE-2019-7732 In Live555 0.95, a setup packet can cause a memory leak leading to DoS because, when there are multiple instances of a single field (username, realm,… Streaming Media Mitigation only Fix from $1,9502019-02-11 HIGH 7.5 CVE-2019-7733 In Live555 0.95, there is a buffer overflow via a large integer in a Content-Length HTTP header because handleRequestBytes has an unrestricted memmov… Streaming Media No fix yet Fix from $1,9502019-02-11 HIGH 7.5 CVE-2013-6933EPSS 17% The parseRTSPRequestString function in Live Networks Live555 Streaming Media 2011.08.13 through 2013.11.25, as used in VideoLAN VLC Media Player, all… Streaming Media Mitigation only Fix from $1,9502014-01-23 HIGH 7.5 CVE-2013-6934EPSS 28% The parseRTSPRequestString function in Live Networks Live555 Streaming Media 2013.11.26, as used in VideoLAN VLC Media Player, allows remote attacker… Streaming Media 2.1.0+ Fix from $1,9502014-01-23 HIGH 7.1 CVE-2007-6036 The parseRTSPRequestString function in LIVE555 Media Server 2007.11.01 and earlier allows remote attackers to cause a denial of service (daemon crash… Media Server after 2007.11.01 Fix from $1,9502007-11-20