CVE-2019-15232

The CVE-2019-15232 vulnerability affects LIVE555 Media Server (live555 library). Live555 before 2019.08.16 can assign the same client session ID in rapid succession via GenericMediaServer::createNewClientSessionWithId, leading to a Use-After-Free condition that is mishandled by MPEG1or2 and Matro...

CVE-2019-7314

CVE-2019-7314 affects LIVE555 Live555’s liblivemedia. It is triggered by mishandling the termination of an RTSP stream after RTP/RTCP-over-RTSP has been set up, leading to a use-after-free that can crash the RTSP server or cause unspecified impact. Affected history points to Live555 before 2019.0...

CVE-2019-9215

CVE-2019-9215 affects LIVE555: malformed headers can cause invalid memory access in parseAuthorizationHeader. CVE-2019-7314 (also in LIVE555) enables Use-After-Free during RTSP termination. Documents indicate affected versions before 2019.06.28 and show remediation via updating to 2019.06.28 or l...

CVE-2021-28899

CVE-2021-28899 affects LIVE555 Streaming Media before 2021.3.16, specifically the AC3AudioFileServerMediaSubsession, ADTSAudioFileServerMediaSubsession, and AMRAudioFileServerMediaSubsessionLive OnDemandServerMediaSubsession subclasses. The vulnerability path stems from.Live555 components; impact...

CVE-2013-6933

CVE-2013-6933 affects the Live555 Streaming Media library (used by VideoLAN VLC) where RTSP messages starting with whitespace [single space or tab] trigger an integer underflow, an infinite loop, and a buffer overflow in parseRTSPRequestString. This can lead to a crash or arbitrary code execution...

CVE-2019-7733

CVE-2019-7733 affects LIVE555 Media Server / liblivemedia in Live555 0.95. A buffer overflow can be triggered by a large integer in a Content-Length HTTP header because handleRequestBytes uses an unrestricted memmove, leading to a denial of service and potential crash. Public advisories corrobora...

CVE-2013-6934

CVE-2013-6934 affects VLC Media Player via the Live555 liblivemedia RTSP implementation. The issue arises in parseRTSPRequestString: a space at the beginning of an RTSP message can trigger an integer underflow, an infinite loop, and a buffer overflow, potentially crashing the application or enabl...

CVE-2019-7732

CVE-2019-7732 affects Live555 0.95. The vulnerability is a memory leak in the setup packet handling: when multiple instances of a single field (username, realm, nonce, uri, or response) exist, only the last instance can be freed, enabling a denial-of-service condition. Public references in the pr...

CVE-2025-65407

The Live555 Streaming Media v2018.09.02 library is vulnerable to a use-after-free flaw in the MPEG1or2Demux::newElementaryStream() function. This issue stems from a mix-up in the instructions responsible for freeing memory. An attacker can exploit this by supplying a crafted MPEG Program stream t...

CVE-2025-65405

Live555 Streaming Media version v2018.09.02 is vulnerable to a use-after-free flaw within the ADTSAudioFileSource::samplingFrequency() function. The root cause is a mix-up in the instructions responsible for freeing memory. An attacker can exploit this by supplying a crafted ADTS/AAC file to trig...

CVE-2025-65404

A buffer overflow vulnerability exists in the getSideInfo2() function of Live555 Streaming Media v2018.09.02 . The flaw stems from a failure to properly validate the length of input data, which allows an attacker to cause a Denial of Service (DoS) by providing a specially crafted MP3 stream . Whi...

CVE-2025-65408

The Live555 Streaming Media library (version v2018.09.02 ) is vulnerable to a NULL pointer dereference in the ADTSAudioFileServerMediaSubsession::createNewRTPSink() function. An attacker can exploit this flaw by supplying a crafted ADTS file to cause a Denial of Service (DoS) . This vulnerability...

CVE-2025-65406

The Live555 Streaming Media library (specifically version v2018.09.02 ) contains a heap-based buffer overflow vulnerability in the MatroskaFile::createRTPSinkForTrackNumber() function. This flaw stems from an error in the instruction responsible for freeing memory. An attacker can exploit this by...