CVE-2025-65407

all versions

A use-after-free in the MPEG1or2Demux::newElementaryStream() function of Live555 Streaming Media v2018.09.02 allows attackers to c

6.5MEDIUM

CVE-2025-65408

all versions

A NULL pointer dereference in the ADTSAudioFileServerMediaSubsession::createNewRTPSink() function of Live555 Streaming Media v2018

6.5MEDIUM

CVE-2025-65406

all versions

A heap overflow in the MatroskaFile::createRTPSinkForTrackNumber() function of Live555 Streaming Media v2018.09.02 allows attacker

6.5MEDIUM

CVE-2025-65405

all versions

A use-after-free in the ADTSAudioFileSource::samplingFrequency() function of Live555 Streaming Media v2018.09.02 allows attackers

6.5MEDIUM

CVE-2025-65404

all versions

A buffer overflow in the getSideInfo2() function of Live555 Streaming Media v2018.09.02 allows attackers to cause a Denial of Serv

6.5MEDIUM

CVE-2023-37117

all versions

A heap-use-after-free vulnerability was found in live555 version 2023.05.10 while handling the SETUP.

9.8CRITICAL

CVE-2021-41396

<= 1.08

Live555 through 1.08 does not handle socket connections properly. A huge number of incoming socket connections in a short time inv

7.5HIGH

CVE-2021-39283

<= 1.08

liveMedia/FramedSource.cpp in Live555 through 1.08 allows an assertion failure and application exit via multiple SETUP and PLAY co

5.5MEDIUM

CVE-2021-39282

<= 1.08

Live555 through 1.08 has a memory leak in AC3AudioStreamParser for AC3 files.

7.5HIGH

CVE-2021-38382

< 2021.08.06

Live555 through 1.08 does not handle Matroska and Ogg files properly. Sending two successive RTSP SETUP commands for the same trac

6.5MEDIUM

CVE-2021-38381

< 2021.08.09

Live555 through 1.08 does not handle MPEG-1 or 2 files properly. Sending two successive RTSP SETUP commands for the same track cau

6.5MEDIUM

CVE-2021-38380

< 2021.08.04

Live555 through 1.08 mishandles huge requests for the same MP3 stream, leading to recursion and s stack-based buffer over-read. An

7.5HIGH

CVE-2021-28899

< 2021.3.16

Vulnerability in the AC3AudioFileServerMediaSubsession, ADTSAudioFileServerMediaSubsession, and AMRAudioFileServerMediaSubsessionL

7.5HIGH

CVE-2020-24027

all versions

In Live Networks, Inc., liblivemedia version 20200625, there is a potential buffer overflow bug in the server handling of a RTSP "

9.8CRITICAL

CVE-2019-15232

< 2019-08-16

Live555 before 2019.08.16 has a Use-After-Free because GenericMediaServer::createNewClientSessionWithId can generate the same clie

9.8CRITICAL

CVE-2019-9215

< 2019.02.27

In Live555 before 2019.02.27, malformed headers lead to invalid memory access in the parseAuthorizationHeader function.

9.8CRITICAL

CVE-2019-7733

all versions

In Live555 0.95, there is a buffer overflow via a large integer in a Content-Length HTTP header because handleRequestBytes has an

7.5HIGH

CVE-2019-7732

all versions

In Live555 0.95, a setup packet can cause a memory leak leading to DoS because, when there are multiple instances of a single fiel

7.5HIGH

CVE-2019-7314

< 0.95

liblivemedia in Live555 before 2019.02.03 mishandles the termination of an RTSP stream after RTP/RTCP-over-RTSP has been set up, w

9.8CRITICAL

CVE-2019-6256

all versions

A Denial of Service issue was discovered in the LIVE555 Streaming Media libraries as used in Live555 Media Server 0.93. It can cau

9.8CRITICAL

CVE-2018-4013

all versions

An exploitable code execution vulnerability exists in the HTTP packet-parsing functionality of the LIVE555 RTSP server library ver

9.8CRITICAL

CVE-2013-6934

all versions

The parseRTSPRequestString function in Live Networks Live555 Streaming Media 2013.11.26, as used in VideoLAN VLC Media Player, all

CVE-2013-6933

all versions

The parseRTSPRequestString function in Live Networks Live555 Streaming Media 2011.08.13 through 2013.11.25, as used in VideoLAN VL

CVE-2007-6036

<= 2007.11.01

The parseRTSPRequestString function in LIVE555 Media Server 2007.11.01 and earlier allows remote attackers to cause a denial of se