Vulnerability index

Browse CVEs

20 matching
Filters 1 Clear all
Severity

Filters apply as you choose them.

Streaming Media MEDIUM 6.5
CVE-2025-65407

A use-after-free in the MPEG1or2Demux::newElementaryStream() function of Live555 Streaming Media v2018.09.02 allows attackers to cause a Denial of Se…

No fix yet
Fix from $1,600 2025-12-01
Streaming Media MEDIUM 6.5
CVE-2025-65406

A heap overflow in the MatroskaFile::createRTPSinkForTrackNumber() function of Live555 Streaming Media v2018.09.02 allows attackers to cause a Denial…

No fix yet
Fix from $1,600 2025-12-01
Streaming Media MEDIUM 6.5
CVE-2025-65408

A NULL pointer dereference in the ADTSAudioFileServerMediaSubsession::createNewRTPSink() function of Live555 Streaming Media v2018.09.02 allows attac…

No fix yet
Fix from $1,600 2025-12-01
Streaming Media MEDIUM 6.5
CVE-2025-65404

A buffer overflow in the getSideInfo2() function of Live555 Streaming Media v2018.09.02 allows attackers to cause a Denial of Service (DoS) via a cra…

No fix yet
Fix from $1,600 2025-12-01
Streaming Media MEDIUM 6.5
CVE-2025-65405

A use-after-free in the ADTSAudioFileSource::samplingFrequency() function of Live555 Streaming Media v2018.09.02 allows attackers to cause a Denial o…

No fix yet
Fix from $1,600 2025-12-01
Live555 CRITICAL 9.8
CVE-2023-37117

A heap-use-after-free vulnerability was found in live555 version 2023.05.10 while handling the SETUP.

No fix yet
Fix from $2,300 2024-01-12
Live555 HIGH 7.5
CVE-2021-41396

Live555 through 1.08 does not handle socket connections properly. A huge number of incoming socket connections in a short time invokes the error-hand…

Fix: after 1.08
Fix from $1,950 2022-07-12
Live555 HIGH 7.5
CVE-2021-39282

Live555 through 1.08 has a memory leak in AC3AudioStreamParser for AC3 files.

Fix: after 1.08
Fix from $1,950 2021-08-18
Live555 MEDIUM 5.5
CVE-2021-39283

liveMedia/FramedSource.cpp in Live555 through 1.08 allows an assertion failure and application exit via multiple SETUP and PLAY commands.

Fix: after 1.08
Fix from $1,600 2021-08-18
Live555 HIGH 7.5
CVE-2021-38380

Live555 through 1.08 mishandles huge requests for the same MP3 stream, leading to recursion and s stack-based buffer over-read. An attacker can lever…

Fix: 2021.08.04+
Fix from $1,950 2021-08-10
Live555 MEDIUM 6.5
CVE-2021-38381

Live555 through 1.08 does not handle MPEG-1 or 2 files properly. Sending two successive RTSP SETUP commands for the same track causes a Use-After-Fre…

Fix: 2021.08.09+
Fix from $1,600 2021-08-10
Live555 MEDIUM 6.5
CVE-2021-38382

Live555 through 1.08 does not handle Matroska and Ogg files properly. Sending two successive RTSP SETUP commands for the same track causes a Use-Afte…

Fix: 2021.08.06+
Fix from $1,600 2021-08-10
Streaming Media HIGH 7.5
CVE-2021-28899

Vulnerability in the AC3AudioFileServerMediaSubsession, ADTSAudioFileServerMediaSubsession, and AMRAudioFileServerMediaSubsessionLive OnDemandServerM…

Fix: 2021.3.16+
Fix from $1,950 2021-04-29
Liblivemedia CRITICAL 9.8
CVE-2020-24027

In Live Networks, Inc., liblivemedia version 20200625, there is a potential buffer overflow bug in the server handling of a RTSP "PLAY" command, when…

No fix yet
Fix from $2,300 2021-01-11
Streaming Media CRITICAL 9.8
CVE-2019-15232

Live555 before 2019.08.16 has a Use-After-Free because GenericMediaServer::createNewClientSessionWithId can generate the same client session ID in su…

Fix: 2019-08-16+
Fix from $2,300 2019-08-20
Streaming Media HIGH 7.5
CVE-2019-7732

In Live555 0.95, a setup packet can cause a memory leak leading to DoS because, when there are multiple instances of a single field (username, realm,…

Mitigation only
Fix from $1,950 2019-02-11
Streaming Media HIGH 7.5
CVE-2019-7733

In Live555 0.95, there is a buffer overflow via a large integer in a Content-Length HTTP header because handleRequestBytes has an unrestricted memmov…

No fix yet
Fix from $1,950 2019-02-11
Streaming Media HIGH 7.5
CVE-2013-6933EPSS 17%

The parseRTSPRequestString function in Live Networks Live555 Streaming Media 2011.08.13 through 2013.11.25, as used in VideoLAN VLC Media Player, all…

Mitigation only
Fix from $1,950 2014-01-23
Streaming Media HIGH 7.5
CVE-2013-6934EPSS 28%

The parseRTSPRequestString function in Live Networks Live555 Streaming Media 2013.11.26, as used in VideoLAN VLC Media Player, allows remote attacker…

Fix: 2.1.0+
Fix from $1,950 2014-01-23
Media Server HIGH 7.1
CVE-2007-6036

The parseRTSPRequestString function in LIVE555 Media Server 2007.11.01 and earlier allows remote attackers to cause a denial of service (daemon crash…

Fix: after 2007.11.01
Fix from $1,950 2007-11-20