Skip to content

Live555 vulnerabilities

Products

Newest

live555 streaming media A NULL pointer dereference in the ADTSAudioFileServerMediaSubsession::createNewRTPSink() function... CVE-2025-65408 6.5 MediumDecember 1, 2025
live555 streaming media A use-after-free in the MPEG1or2Demux::newElementaryStream() function of Live555 Streaming Media... CVE-2025-65407 6.5 MediumDecember 1, 2025
live555 streaming media A heap overflow in the MatroskaFile::createRTPSinkForTrackNumber() function of Live555 Streaming... CVE-2025-65406 Fix available 6.5 MediumDecember 1, 2025
live555 streaming media A use-after-free in the ADTSAudioFileSource::samplingFrequency() function of Live555 Streaming... CVE-2025-65405 6.5 MediumDecember 1, 2025
live555 streaming media A buffer overflow in the getSideInfo2() function of Live555 Streaming Media v2018.09.02 allows... CVE-2025-65404 6.5 MediumDecember 1, 2025
live555 A heap-use-after-free vulnerability was found in live555 version 2023.05.10 while handling the... CVE-2023-37117 Fix available 9.8 CriticalJanuary 12, 2024
live555 Live555 through 1.08 does not handle socket connections properly. A huge number of incoming... CVE-2021-41396 7.5 HighJuly 11, 2022
live555 Live555 through 1.08 has a memory leak in AC3AudioStreamParser for AC3 files. CVE-2021-39282 Fix available 7.5 HighAugust 18, 2021
live555 liveMedia/FramedSource.cpp in Live555 through 1.08 allows an assertion failure and application... CVE-2021-39283 Fix available 5.5 MediumAugust 18, 2021
live555 Live555 through 1.08 mishandles huge requests for the same MP3 stream, leading to recursion and s... CVE-2021-38380 Fix available 7.5 HighAugust 10, 2021
live555 Live555 through 1.08 does not handle MPEG-1 or 2 files properly. Sending two successive RTSP... CVE-2021-38381 Fix available 6.5 MediumAugust 10, 2021
live555 Live555 through 1.08 does not handle Matroska and Ogg files properly. Sending two successive RTSP... CVE-2021-38382 Fix available 6.5 MediumAugust 10, 2021
live555 streaming media Vulnerability in the AC3AudioFileServerMediaSubsession, ADTSAudioFileServerMediaSubsession, and... CVE-2021-28899 Fix available 7.5 HighApril 29, 2021
live555 liblivemedia In Live Networks, Inc., liblivemedia version 20200625, there is a potential buffer overflow bug... CVE-2020-24027 Fix available 9.8 CriticalJanuary 11, 2021
live555 streaming media Live555 before 2019.08.16 has a Use-After-Free because GenericMediaServer:... CVE-2019-15232 Fix available 9.8 CriticalAugust 19, 2019
debian linux, live555 streaming media, opensuse backports sle +1 more +3 more In Live555 before 2019.02.27, malformed headers lead to invalid memory access in the... CVE-2019-9215 Fix available 9.8 CriticalFebruary 28, 2019
live555 streaming media In Live555 0.95, there is a buffer overflow via a large integer in a Content-Length HTTP header... CVE-2019-7733 Fix available 7.5 HighFebruary 11, 2019
live555 streaming media In Live555 0.95, a setup packet can cause a memory leak leading to DoS because, when there are... CVE-2019-7732 7.5 HighFebruary 11, 2019
debian linux, live555 streaming media +1 more liblivemedia in Live555 before 2019.02.03 mishandles the termination of an RTSP stream after RTP... CVE-2019-7314 Fix available 9.8 CriticalFebruary 4, 2019
live555 media server, debian linux +1 more A Denial of Service issue was discovered in the LIVE555 Streaming Media libraries as used in... CVE-2019-6256 Fix available 9.8 CriticalJanuary 14, 2019
debian linux, live networks live555 media server, live555 media server +2 more An exploitable code execution vulnerability exists in the HTTP packet-parsing functionality of... CVE-2018-4013 Public exploitFix available 10.0 CriticalOctober 19, 2018
live555 streaming media, videolan vlc media player +1 more The parseRTSPRequestString function in Live Networks Live555 Streaming Media 2013.11.26, as used... CVE-2013-6934 EPSS 28.2% 7.5 HighJanuary 23, 2014
live555 streaming media The parseRTSPRequestString function in Live Networks Live555 Streaming Media 2011.08.13 through... CVE-2013-6933 Fix available EPSS 17.4% 7.5 HighJanuary 23, 2014
live555 media server The parseRTSPRequestString function in LIVE555 Media Server 2007.11.01 and earlier allows remote... CVE-2007-6036 Public exploit 7.1 HighNovember 20, 2007