CVE-2025-65407 | Medium | 6.5 | 2025-12-01 | A use-after-free in the MPEG1or2Demux::newElementaryStream() function of Live555 Streaming Media v2018.09.02 allows attackers to cause a Denial of Service (DoS… |
CVE-2025-65408 | Medium | 6.5 | 2025-12-01 | A NULL pointer dereference in the ADTSAudioFileServerMediaSubsession::createNewRTPSink() function of Live555 Streaming Media v2018.09.02 allows attackers to ca… |
CVE-2025-65406 | Medium | 6.5 | 2025-12-01 | A heap overflow in the MatroskaFile::createRTPSinkForTrackNumber() function of Live555 Streaming Media v2018.09.02 allows attackers to cause a Denial of Servic… |
CVE-2025-65405 | Medium | 6.5 | 2025-12-01 | A use-after-free in the ADTSAudioFileSource::samplingFrequency() function of Live555 Streaming Media v2018.09.02 allows attackers to cause a Denial of Service… |
CVE-2025-65404 | Medium | 6.5 | 2025-12-01 | A buffer overflow in the getSideInfo2() function of Live555 Streaming Media v2018.09.02 allows attackers to cause a Denial of Service (DoS) via a crafted MP3 s… |
CVE-2023-37117 | Critical | 9.8 | 2024-01-12 | A heap-use-after-free vulnerability was found in live555 version 2023.05.10 while handling the SETUP. |
CVE-2021-41396 | High | 7.5 | 2022-07-12 | Live555 through 1.08 does not handle socket connections properly. A huge number of incoming socket connections in a short time invokes the error-handling modul… |
CVE-2021-39283 | Medium | 5.5 | 2021-08-18 | liveMedia/FramedSource.cpp in Live555 through 1.08 allows an assertion failure and application exit via multiple SETUP and PLAY commands. |
CVE-2021-39282 | High | 7.5 | 2021-08-18 | Live555 through 1.08 has a memory leak in AC3AudioStreamParser for AC3 files. |
CVE-2021-38382 | Medium | 6.5 | 2021-08-10 | Live555 through 1.08 does not handle Matroska and Ogg files properly. Sending two successive RTSP SETUP commands for the same track causes a Use-After-Free and… |
CVE-2021-38381 | Medium | 6.5 | 2021-08-10 | Live555 through 1.08 does not handle MPEG-1 or 2 files properly. Sending two successive RTSP SETUP commands for the same track causes a Use-After-Free and daem… |
CVE-2021-38380 | High | 7.5 | 2021-08-10 | Live555 through 1.08 mishandles huge requests for the same MP3 stream, leading to recursion and s stack-based buffer over-read. An attacker can leverage this t… |
CVE-2021-28899 | High | 7.5 | 2021-04-29 | Vulnerability in the AC3AudioFileServerMediaSubsession, ADTSAudioFileServerMediaSubsession, and AMRAudioFileServerMediaSubsessionLive OnDemandServerMediaSubses… |
CVE-2020-24027 | Critical | 9.8 | 2021-01-11 | In Live Networks, Inc., liblivemedia version 20200625, there is a potential buffer overflow bug in the server handling of a RTSP "PLAY" command, when the comma… |
CVE-2019-15232 | Critical | 9.8 | 2019-08-20 | Live555 before 2019.08.16 has a Use-After-Free because GenericMediaServer::createNewClientSessionWithId can generate the same client session ID in succession… |
CVE-2019-9215 | Critical | 9.8 | 2019-02-28 | In Live555 before 2019.02.27, malformed headers lead to invalid memory access in the parseAuthorizationHeader function. |
CVE-2019-7733 | High | 7.5 | 2019-02-11 | In Live555 0.95, there is a buffer overflow via a large integer in a Content-Length HTTP header because handleRequestBytes has an unrestricted memmove. |
CVE-2019-7732 | High | 7.5 | 2019-02-11 | In Live555 0.95, a setup packet can cause a memory leak leading to DoS because, when there are multiple instances of a single field (username, realm, nonce, ur… |
CVE-2019-7314 | Critical | 9.8 | 2019-02-04 | liblivemedia in Live555 before 2019.02.03 mishandles the termination of an RTSP stream after RTP/RTCP-over-RTSP has been set up, which could lead to a Use-Afte… |
CVE-2019-6256 | Critical | 9.8 | 2019-01-14 | A Denial of Service issue was discovered in the LIVE555 Streaming Media libraries as used in Live555 Media Server 0.93. It can cause an RTSPServer crash in han… |
CVE-2018-4013 | Critical | 9.8 | 2018-10-19 | An exploitable code execution vulnerability exists in the HTTP packet-parsing functionality of the LIVE555 RTSP server library version 0.92. A specially crafte… |
CVE-2013-6934 | | | 2014-01-23 | The parseRTSPRequestString function in Live Networks Live555 Streaming Media 2013.11.26, as used in VideoLAN VLC Media Player, allows remote attackers to cause… |
CVE-2013-6933 | | | 2014-01-23 | The parseRTSPRequestString function in Live Networks Live555 Streaming Media 2011.08.13 through 2013.11.25, as used in VideoLAN VLC Media Player, allows remote… |
CVE-2007-6036 | | | 2007-11-20 | The parseRTSPRequestString function in LIVE555 Media Server 2007.11.01 and earlier allows remote attackers to cause a denial of service (daemon crash) via a sh… |