Live555: Security Vulnerabilities
A use-after-free in the MPEG1or2Demux::newElementaryStream() function of Live555 Streaming Media v2018.09.02 allows attackers to cause a Denial of Service (DoS) via supplying a crafted MPEG Program stream.
CVSS Score
6.5
EPSS Score
0.0
Published
2025-12-01
A heap overflow in the MatroskaFile::createRTPSinkForTrackNumber() function of Live555 Streaming Media v2018.09.02 allows attackers to cause a Denial of Service (DoS) via supplying a crafted MKV file.
CVSS Score
6.5
EPSS Score
0.0
Published
2025-12-01
A NULL pointer dereference in the ADTSAudioFileServerMediaSubsession::createNewRTPSink() function of Live555 Streaming Media v2018.09.02 allows attackers to cause a Denial of Service (DoS) via supplying a crafted ADTS file.
CVSS Score
6.5
EPSS Score
0.0
Published
2025-12-01
A buffer overflow in the getSideInfo2() function of Live555 Streaming Media v2018.09.02 allows attackers to cause a Denial of Service (DoS) via a crafted MP3 stream.
CVSS Score
6.5
EPSS Score
0.0
Published
2025-12-01
A use-after-free in the ADTSAudioFileSource::samplingFrequency() function of Live555 Streaming Media v2018.09.02 allows attackers to cause a Denial of Service (DoS) via supplying a crafted ADTS/AAC file.
CVSS Score
6.5
EPSS Score
0.0
Published
2025-12-01
A heap-use-after-free vulnerability was found in live555 version 2023.05.10 while handling the SETUP.
CVSS Score
9.8
EPSS Score
0.003
Published
2024-01-12
Live555 through 1.08 does not handle socket connections properly. A huge number of incoming socket connections in a short time invokes the error-handling module, in which a heap-based buffer overflow happens. An attacker can leverage this to launch a DoS attack.
CVSS Score
7.5
EPSS Score
0.004
Published
2022-07-12
Live555 through 1.08 has a memory leak in AC3AudioStreamParser for AC3 files.
CVSS Score
7.5
EPSS Score
0.003
Published
2021-08-18
liveMedia/FramedSource.cpp in Live555 through 1.08 allows an assertion failure and application exit via multiple SETUP and PLAY commands.
CVSS Score
5.5
EPSS Score
0.002
Published
2021-08-18
Live555 through 1.08 mishandles huge requests for the same MP3 stream, leading to recursion and s stack-based buffer over-read. An attacker can leverage this to launch a DoS attack.
CVSS Score
7.5
EPSS Score
0.003
Published
2021-08-10
Page 1