CVE-2026-38998

LIVE555 Streaming Media (version 2026.02.26) is affected by a use-after-free in the SocketDescriptor::tcpReadHandler1 function located in liveMedia/RTPInterface.cpp. An attacker can trigger a Denial of Service by sending a series of crafted RTSP and HTTP requests to the server. No specific patch ...