CVE-2025-65407

all versions

A use-after-free in the MPEG1or2Demux::newElementaryStream() function of Live555 Streaming Media v2018.09.02 allows attackers to c

6.5MEDIUM

CVE-2025-65408

all versions

A NULL pointer dereference in the ADTSAudioFileServerMediaSubsession::createNewRTPSink() function of Live555 Streaming Media v2018

6.5MEDIUM

CVE-2025-65406

all versions

A heap overflow in the MatroskaFile::createRTPSinkForTrackNumber() function of Live555 Streaming Media v2018.09.02 allows attacker

6.5MEDIUM

CVE-2025-65405

all versions

A use-after-free in the ADTSAudioFileSource::samplingFrequency() function of Live555 Streaming Media v2018.09.02 allows attackers

6.5MEDIUM

CVE-2025-65404

all versions

A buffer overflow in the getSideInfo2() function of Live555 Streaming Media v2018.09.02 allows attackers to cause a Denial of Serv

6.5MEDIUM

CVE-2021-28899

< 2021.3.16

Vulnerability in the AC3AudioFileServerMediaSubsession, ADTSAudioFileServerMediaSubsession, and AMRAudioFileServerMediaSubsessionL

7.5HIGH

CVE-2019-15232

< 2019-08-16

Live555 before 2019.08.16 has a Use-After-Free because GenericMediaServer::createNewClientSessionWithId can generate the same clie

9.8CRITICAL

CVE-2019-9215

< 2019.02.27

In Live555 before 2019.02.27, malformed headers lead to invalid memory access in the parseAuthorizationHeader function.

9.8CRITICAL

CVE-2019-7733

all versions

In Live555 0.95, there is a buffer overflow via a large integer in a Content-Length HTTP header because handleRequestBytes has an

7.5HIGH

CVE-2019-7732

all versions

In Live555 0.95, a setup packet can cause a memory leak leading to DoS because, when there are multiple instances of a single fiel

7.5HIGH

CVE-2019-7314

< 0.95

liblivemedia in Live555 before 2019.02.03 mishandles the termination of an RTSP stream after RTP/RTCP-over-RTSP has been set up, w

9.8CRITICAL

CVE-2013-6934

all versions

The parseRTSPRequestString function in Live Networks Live555 Streaming Media 2013.11.26, as used in VideoLAN VLC Media Player, all

CVE-2013-6933

all versions

The parseRTSPRequestString function in Live Networks Live555 Streaming Media 2011.08.13 through 2013.11.25, as used in VideoLAN VL